Which organizational role is tasked with assigning sensitivi

Which organizational role is tasked with assigning sensitivity labels?
A. Management
B. The auditor
C. The user
D. The owner

Solution

A. When the cost of the countermeasure outweighs the value of the asset; the best approach is to take no action. This means the asset would cost more to protect than what it is worth. Answers B, C, and D are incorrect because there would be a loss of value in transferring the risk. In such cases, there would be no reason to mitigate the risk because the cost would be prohibitive and increase and the cost of exposure. This violated good security practices.