Which term entails analyzing the data that the organization retains, determining its importance and value, and then assigning it to a category?

• A. Data Custodian
• B. Data Owner/Controller
• C. Confidentiality
• D. Data Classification

Answer: (D)

Classifying data involves examining what the data is, how important or sensitive it is, and what value it has to the organization, then labeling it into categories such as public, internal, confidential, or restricted. This categorization guides how the data is stored, who can access it, and what protection controls are needed, tying directly into risk management and governance. The other terms describe roles or a security property rather than the act of evaluating and labeling data: a data custodian handles the technical management of data; a data owner/controller is the accountable party for governance decisions; confidentiality is a protection objective. So the described activity matches data classification.