Which of the following is the most important criterion in determining the classification of data?
A. Regulatory requirements in jurisdictions within which the organization is not operating
B. The cost of implementing controls for the data
C. The level of damage that could be caused if the data were disclosed
D. The likelihood that the data will be accidentally or maliciously disclosed
Eit
