Which of the following does a user not need to be aware of regarding their organizations information security policy?

A.
The people involved in establishing the security policy

B.
The definition of the organization�s security policy

C.
The actions that need to be performed in case of a disaster

D.
Who monitors compliance to the organization�s security policy

Explanation:
Only personnel directly involved in the disaster recovery plan should
have a copy of the plan, whereas all employees should be aware of the contents of
the organizations general security policy.