💡 Among the listed application controls, password selection is the most dependent on the password owner because it requires the user to create a strong and secure password. While system policies can enforce certain rules (e.g., minimum length, complexity requirements), the ultimate responsibility for choosing a secure password rests with the user. B. Password aging – This is typically enforced by system settings, requiring users to change passwords after a set period. C. Password lockout – This is an automatic control that locks an account after multiple failed login attempts, reducing brute-force attack risks. D. Password rotation – This is also a system-enforced policy that mandates periodic password changes, rather than relying on user discretion.