Which of the following should be an information security manager's PRIMARY role when an organization initiates a data classification process?

A. Verify that assets have been appropriately classified.
B. Apply security in accordance with specific classification.
C. Define the classification structure to be implemented.
D. Assign the asset classification level.