Who is responsible to classify my Information Assets? The owner(s) must classify information assets and ensure those assets are protected with the appropriate security controls.