When reviewing a data classification scheme, it is MOST important for an IS auditor to determine if: 

Answer options:

A. each information asset is assigned to a different classification.
B. senior IT managers are identified as information owners.
C. the security criteria are clearly documented for each classification.
D. the information owner is required to approve access to the asset.

C