Which of the following factor is least likely to be considered while implementing or augmenting data security solution for privacy protection:
A. Security controls deployment at the database level
B. Information security infrastructure up-gradation in the organization
C. Classification of data type and its usage by various functions in the organization
D. Training and awareness program for third party organizations