Establishing data ownership is an important first step for which of the following processes?

A. Assigning user access privileges
B. Developing organizational security policies
C. Creating roles and responsibilities
D. Classifying data