An IT steering committee wants the enterprise's mobile workforce to use cloud-based file storage to save non-sensitive corporate data, removing the need for remote access to that information. Before this change is implemented, what should be included in the data management policy?

A. A process for blocking access to cloud-based apps if inappropriate content is discovered
B. A requirement to scan approved cloud-based apps for inappropriate content
C. A mandate for periodic employee training on how to classify corporate data files
D. A mandate for the encryption of all corporate data files at rest that contain sensitive data