Which of the following should be an information security manager’s PRIMARY role when an organization initiates a data classification process?

A. Assign the asset classification level.
B. Define the classification structure to be implemented.
C. Verify that assets have been appropriately classified.
D. Apply security in accordance with specific classification.