A cloud migration reveals thousands of unlabeled legacy files containing mixed customer and internal data. The project sponsor wants to bulk-encrypt everything and proceed to meet the cutover date. What should the data governance lead do FIRST?
A. Classify the data according to the organizational scheme
B. Encrypt all files at the highest protection level
C. Identify data owners to assign accountability
D. Apply retention policies to purge obsolete records
(Explain your answer for more points in the comments!)