Which of the following is the PRIMARY prerequisite to implementing data classification within an
organization?
A.
Defining job roles
B.
Performing a risk assessment
C.
Identifying data owners
D.
Establishing data retention policies
Explanation:
Identifying the data owners is the first step, and is essential to implementing data classification.
Defining job roles is not relevant. Performing a risk assessment is important, but will require the
participation of data owners (who must first be identified). Establishing data retention policies may
occur after data have been classified.