Which One of the Following Can Be Said About IT

Multiple Choice

Which one of the following can be said about IT security policies?

A) IT security policies define the scope and overall expectation for the company's information security program.
B) IT security policies discourage standardization and integration.
C) IT security policies require an IT-only perspective.
D) IT security policies complicate the decision-making process.
E) IT security policies are loose to allow for many choices.