Which of the following would BEST help to support an auditor’s conclusion about the effectiveness of an implemented data classification program?

A. Detailed data classification scheme
B. Access rights provisioned according to scheme
C. Business use cases and scenarios
D. Purchase of information management tools