An organization is recovering data following a datacenter outage and determines that backup
copies of files containing personal information were stored in an unsecure location, because the
sensitivity was unknown. Which of the following activities should occur to prevent this in the
future?

A.
Business continuity planning

B.
Quantitative assessment

C.
Data classification

D.
Qualitative assessment