Fotis's organization has decided to use the CIS benchmarks for its systems. The CIS benchmarks are an example of what practice?

The CIS benchmarks are an example of a security baseline. A risk assessment would help identify which controls were needed, and proper system ownership is an important part of making sure baselines are implemented and maintained. Data labeling can help ensure that controls are applied to the right systems and data.