What are three primary activities in the cycle of building an enterprise security strategy?

What are three primary activities in the cycle of building an enterprise security strategy? (Choose
three.)

A.
activity audit

B.
administration

C.
policy establishment

D.
technology implementation