Information Security management is a process of defining the security controls in order to
protect information assets. The first action of a management program to implement
information security is to have a security program in place. What are the objectives of a
security program? Each correct answer represents a complete solution. Choose all that
apply.

A.
Security organization

B.
System classification

C.
Information classification

D.
Security education