Which should be the key driver for a company security policy’s creation, implementation and enforcement?

A.
the company’s business objectives

B.
the company’s network topology

C.
the business knowledge of the IT staff

D.
the technical knowledge of the IT staff

E.
the IT future directions