An IT audit reveals inconsistent maintenance of data privacy in enterprise systems primarily due to a lack of data sensitivity categorizations. Once the categorizations are defined, what is the BEST l

Inconsistent data privacy stemming from a lack of data sensitivity categorizations is best addressed long-term by standardizing data classification processes across the entire enterprise. This ensures that once categories are defined, they are consistently applied, managed, and enforced across all systems and data, leading to uniform privacy maintenance.

Incorporating privacy categorizations into contracts is a good step for third-party agreements but does not address the internal operational problem of inconsistent data privacy maintenance within enterprise systems.

Requiring business impact analyses (BIAs) for enterprise systems focuses on the impact of disruption, which is different from ensuring consistent data privacy based on classification.

Reassessing the data governance policy might be a step, but the specific, actionable strategic response to implement the newly defined categorizations is process standardization.