Which of the following processes is used to protect the data based on its secrecy, sensitivity, or confidentiality?

Change Control is a project or configuration management process for reviewing and approving modifications to scope, schedule, cost, or system baselines, and has no direct role in protecting data by sensitivity level.

Data Hiding is an object-oriented programming principle that restricts direct access to an object's internal attributes through encapsulation, and is not a security process for categorizing data by confidentiality.

Configuration Management tracks and controls changes to system components and software baselines to ensure system integrity, but it does not classify or assign protection levels to data based on secrecy.

Data classification assigns labels such as public, internal, confidential, or restricted to data based on its sensitivity and the potential harm from unauthorized disclosure. This process ensures that security controls - including encryption, access restrictions, and handling procedures - are matched to the confidentiality requirements of each data category.