Which of the Following Are Functions an Organization's Security Policy

Multiple Choice

Which of the following are functions an organization's security policy can serve? (Choose all that apply.)

A) describe an overall intention and direction
B) detail specific risks
C) help to instill security awareness
D) dictate the tools the IT department must use to maintain security