Penelope Has Just Been Hired as a Cybersecurity Manager for an Organization

Multiple Choice

Penelope has just been hired as a cybersecurity manager for an organization. She has done an initial analysis of the organization's policies and sees there is no document outlining the duties and responsibilities of data custodians. Which of the following policies might she consider creating?

A) Data retention policy
B) Data classification policy
C) Data ownership policy
D) Data protection policy