How to control data security on the catalog reports for a custom HR specialist role?

Summary:

Content (required):

What controls catalog reports data access?

Should a custom 'Human Resource Analyst' be assigned to a security criteria?

If I add access to a role for certain subject areas (as per the report subject areas)? How the report data will be secured?

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):