To classify information, you have to understand what the business impact would be in case the data’s confidentiality, availability or integrity were compromised – this is why an authorized business representative should always be involved when information is classified