Which of the following would address the inherent risk until the data owners can be formally identified?

A company is deploying a DIP solution and scanning workstations and network drives for documents that contain potential Pll and payment card data.

The results of the first scan are as follows:

The security learn is unable to identify the data owners for the specific files in a timely manner and does not suspect malicious activity with any of the detected files.

Which of the following would address the inherent risk until the data owners can be formally identified?
A . Move the files from the marketing share to a secured drive.
B . Search the metadata for each file to locate the file’s creator and transfer the files to the personal drive of the listed creator.
C . Configure the DLP tool to delete the files on the shared drives
D . Remove the access for the internal audit group from the accounts payable and payroll shares

Answer: A