A financial services company is implementing a cloud data governance program. Their data discovery tool has scanned an object storage repository and identified thousands of files. The security architect wants to ensure that once data is discovered, appropriate handling controls (encryption requirements, access restrictions, and retention rules) can be automatically enforced by downstream tools such as the IRM and DLP systems. Which activity is the essential next step that enables those downstream controls to function correctly?