According to the Corporate Governance Task Force (CGTF),in Order to Build

Multiple Choice

According to the Corporate Governance Task Force (CGTF) ,in order to build programs suited to their needs,organizations should do all but which of the following?

A) Create and execute a plan for punitive action for employees who fail to resolve information security deficiencies
B) Use security best practices guidance, such as ISO 17799, to measure information security performance
C) Establish plans, procedures, and tests to provide continuity of operations
D) Develop plans and initiate actions to provide adequate information security for networks, facilities, systems, and information