Which of the Following Is an Information Security Governance Responsibility

Multiple Choice

Which of the following is an information security governance responsibility of the organization's employees?

A) Communicate policies and the program
B) Set security policy, procedures, programs and training for the organization
C) Brief the board, customers and the public
D) Implement policy, report security vulnerabilities and breaches