A business owner wants the security team to classify all records without business input. What should the manager explain?

1. Only database administrators can know data sensitivity
2. All records must share one sensitivity level
3. Classification is unnecessary if encryption exists
4. Business owners determine value and use; security supports the classification process