Which of These Actions Is NOT Generally Part of the Responsibility

Multiple Choice

Which of these actions is NOT generally part of the responsibility of an IT or software engineer?

A) Providing feedback on privacy policies.
B) Implementing multi-factor authentication.
C) Certifying compliance with security and privacy law.
D) Building privacy controls into the organization's IT systems or software.