Based on a review of the existing access policies the network administrator determines that that changes are needed to meet current regulatory requirements of the

organization’s access control process. To initiate changes in teh process, the network administrator should FIRST:

A.
update the affected policies and inform the user community of the changes

B.
distribute a memo stating that all new accounts must follow current regulatory requirements

C.
inform senior management that changes are needed to existing policies

D.
notify the user community that non-compliant account will be required to use the new process