Which of the following would provide the BEST basis for allocating proportional protection activities when comprehensive classification is not feasible?

Which of the following would provide the BEST basis for allocating proportional protection activities when comprehensive classification is not feasible?
A . Single classification level allocation
B . Business process re-engineering
C . Business dependency assessment
D . Comprehensive cyber insurance procurement

Answer: C