Which of the Following Is Not a Guideline Dealing with Information

Multiple Choice

Which of the following is not a guideline dealing with information security compliance?

A) Maintain stable information security controls even when business changes occur
B) Design information systems to permit later auditing
C) Hold third party service providers to high standards
D) Monitor personnel to prevent information misuse or loss