An organization is recovering data following a datacenter outage and determines that backup
copies of files containing personal information were stored in an unsecure location, because the
sensitivity was unknown. Which of the following activities should occur to prevent this in the
future?

A.
Business continuity planning

B.
Quantitative assessment

C.
Data classification

D.
Qualitative assessment

Explanation:
Information classification is done by confidentiality and comprises of three categories, namely:
public use, internal use and restricted use. Knowing how to apply these categories and matching it
up with the appropriate data handling will address the situation of the data ‘unknown sensitivity’