C1.1 - Confidential Information Identified and Protected

C1.1 requires organizations to identify all confidential information they handle and implement safeguards to protect it from unauthorized access, disclosure, or alteration. This includes documenting data classifications, applying encryption, access controls, and