The technology steering committee is struggling with increased requirements stemming from an increase in telecommuting. The organization has not addressed
telecommuting in the past. The implementation of a new SSL-VPN and a VOIP phone solution enables personnel to work from remote locations with corporate
assets. Which of the following steps must the committee take FIRST to outline senior management’s directives?

A.
Develop an information classification scheme that will properly secure data on corporate systems.

B.
Implement database views and constrained interfaces so remote users will be unable to access PII from personal equipment.

C.
Publish a policy that addresses the security requirements for working remotely with company equipment.

D.
Work with mid-level managers to identify and document the proper procedures for telecommuting.