Which of the following is required to determine classification and ownership?
A.
System and data resources are properly identified
B.
Access violations are logged and audited
C.
Data file references are identified and linked
D.
System security controls are fully integrated