A classification model is necessary to ensure consistent protection for an organization's information assets, because it defines the criteria for assigning different levels of sensitivity and criticality to the information assets, and determines the appropriate security controls and handling procedures for each level. Data ownership, regulatory requirements, and control assessment are also important aspects of information security management, but they are not sufficient to ensure consistent protection without a classification model.
Reference = CISM Review Manual, 16th Edition, page 67