Which of the following can be performed when an element of the company policy cannot be
enforced by technical means?

A.
Develop a set of standards

B.
Separation of duties

C.
Develop a privacy policy

D.
User training