Which choice below is NOT an accurate statement about the visibility of IT security policy?

A.
Include the IT security policy as a regular topic at staff meetings at all levels of the organization.

B.
The IT security policy should not be afforded high visibility.

C.
The IT security policy could be visible through panel discussions with guest speakers.

D.
The IT security policy should be afforded high visibility.

Explanation:

Especially high visibility should be afforded the formal issuance of IT security policy. This is because
nearly all employees at all levels will in some way be affected, major organizational resources are
being addressed, and many new terms, procedures, and activities will be introduced. Including IT
security as a regular topic at staff meetings at all levels of the organization can be helpful. Also,
providing visibility through such avenues as management presentations, panel discussions, guest
speakers, question/answer forums, and newsletters can be beneficial.