According to the Corporate Governance Task Force (CGTF),in Order to Build

Multiple Choice

According to the Corporate Governance Task Force (CGTF) ,in order to build programs suited to their needs,organizations should do all but which of the following?

A) Conduct periodic testing and evaluation of the effectiveness of information security policies and procedures
B) Establish a security management structure to assign explicit individual roles, responsibilities, authority, and accountability
C) Conduct an annual information security evaluation, the results of which the CISO should review with security staff and then report to the board of directors
D) Implement policies and procedures based on risk assessments to secure information assets