Which of the Following Is Not One of the Common

Multiple Choice

Which of the following is not one of the common policy areas generally included in an information security policy?

A) Access Control Policies (e.g., password controls)
B) External Access Policies (e.g., accessing the Web and Internet)
C) Usage of Social Security Number Policies. (e.g., whether it is an identifier)
D) Acceptable Use Policies (e.g., usage of organization's computer resources)