A company wants to restrict emailing of PHI documents. The company is implementing a DLP solution. In order to restrict PHI documents, which of the following should be performed FIRST?


A. Retention
B. Governance
C. Classification
D. Change management