Which policy defines what constitutes sensitive data and applies protection to it? Security-Related Policies and Procedures Which policy defines what constitutes sensitive data and applies protection to it? a. Classification b. BCP c. Data review d. Data theft Answer: D A data theft policy defines what constitutes sensitive data and applies protection to it. Learn More : Share this Share on FacebookTweet on TwitterPlus on Google+