Domain 2: Asset Security
Which of the following is the MOST critical step when performing data classification in an organization?
A. Assigning a security label to each piece of data
B. Training employees on classification procedures
C. Establishing ownership for the data
D. Identifying the sensitivity and value of the data