There are never enough people in a security team to complete the job correctly, but there is an easier way. The key is responsibility. Data ownership typically belongs to the departmental area that uses or generates it. The responsibility for rating it, therefore, should be left in the department. The security team simply would act as a central storage for the information and as a consulting source for the department.
Security is a hot topic, and fear is a great motivator used by salespeople.
Remember that most salespeople aren't technicians and often make inflated claims to sell products. Information systems professionals are probably more qualified than most salespeople to sort out the truth from the hype. Managers who want to get on the right track should join a security society because information will be their most powerful tool. If outside help is warranted, it will benefit the organization in the long run to seek out the services of a qualified third-party consultant. Protecting the information in an organization is important, so remember to take it slow, break the plan down into a cohesive list of tasks, find the right people, and get good advice.