As part of the ongoing information security plan in a large software development company, the Chief
Information officer (CIO) has decided to review and update the company’s privacy policies and procedures to
reflect the changing business environment and business requirements. Training and awareness of the new
policies and procedures has been incorporated into the security awareness program which should be:
A.
presented by top level management to only data handling staff.
B.
customized for the various departments and staff roles.
C.
technical in nature to ensure all development staff understand the procedures.
D.
used to promote the importance of the security department.