Which of the following is the PRIMARY prerequisite to implementing data classification within an organization?

A.
Defining job roles

B.
Performing a risk assessment

C.
Identifying data owners

D.
Establishing data retention policies

Explanation:

Identifying the data owners is the first step, and is essential to implementing data classification. Defining job roles is not relevant. Performing a risk assessment is important, but will require the participation of data owners
(who must first be identified). Establishing data retention policies may occur after data have been classified.