When performing a data classification project, an information security manager should:

A. assign information critically and sensitivity
B. identify information owners
C. identify information custodians
D. assign information access privileges