You are the security administrator for a private corporation. Your network hosts a wide range of data from freely distributed Web documents to customer contact lists to financial records to proprietary business process documentation. All data on the company network is labeled as classified and confidential. However, users don’t seem to understand that they need to handle certain documents with more care and control than others. Which of the following will improve this situation?
a. Enforce a mandatory access control environment.
b. Use stronger authentication factors.
c. Create a classification policy.
d. Define an acceptable use policy.