Which software security requirement focuses on assigning sensitivity levels and evaluating potential consequences for stored information?

Cloud Data Loss Prevention (DLP) is a technology or set of policies to prevent sensitive data from leaving defined boundaries, but data classification is a prerequisite for DLP to know what data to protect.

Data ownership defines who is responsible for the data, not the process of assigning sensitivity levels and consequences.

Data anonymization is the process of removing personally identifiable information from data, which is a control measure, not the initial assessment of sensitivity and consequences.

Data classification is the process of categorizing data based on its sensitivity, value, and the impact of its loss or exposure. This involves assigning specific sensitivity levels (e.g., public, internal, confidential) and evaluating the potential consequences of unauthorized access, modification, or disclosure to determine appropriate security controls.