The data owner sometimes refer to as the organizational owner or senior manager is the person who has the ultimate organizational responsibility for data, the owner is typically the chief executive officer (CEO), president or a department head (DH). Data owners identify the classification of data and ensure that it is labeled properly.. in that case the first thing to assign is classification. my point is you dont assign the organizational owner.

While other factors like cost, migration period, and data integrity are important considerations, security tends to be the primary concern for many organizations when it comes to moving to the cloud.
Companies often worry about:
Data privacy and protection in a cloud environment, especially when sensitive or regulated data is involved.
Control over data since the cloud service provider is responsible for maintaining the infrastructure, which might create concerns about unauthorized access, breaches, and compliance with regulations (such as GDPR, HIPAA, etc.).
Potential for data loss or downtime in case of cloud service disruptions.
Misconfigurations or human errors that can leave cloud environments vulnerable to attack.
Because security issues directly affect the confidentiality, integrity, and availability of data, they are often viewed as the greatest risk when transitioning to the cloud.

Most secure is to avoid the use and reliance of CSP's key infrastructure and only use internal one.

A VPN creates an encrypted tunnel between a remote worker's device and the corporate network, protecting the confidentiality and integrity of data in transit across untrusted networks (such as public Wi-Fi or the internet), and can also provide authentication and access control for remote connections.

Access based on user's role provides the minimum set of privileges required to perform a job function and restricts the user to a domain with the required privileges. This is also known as role- based access control (RBAC), which is a method of enforcing the principle of least privilege.
RBAC assigns permissions to roles rather than individual users, and users are assigned roles based on their responsibilities and qualifications