Which of the following can be performed when an element of the company policy cannot be enforced by
technical means?

A.
Develop a set of standards

B.
Separation of duties

C.
Develop a privacy policy

D.
User training

Explanation:
User training is an important aspect of maintaining safety and security. It helps improve users’ security
awareness in terms of prevention, enforcement, and threats. It is of critical importance when element of the
company policy cannot be enforced by technical means.