Which of the following can be performed when an element of the company policy cannot be
enforced by technical means?

A.
Develop a set of standards

B.
Separation of duties

C.
Develop a privacy policy

D.
User training

Explanation:
User training is an important aspect of maintaining safety and security. It helps improve users’
security awareness in terms of prevention, enforcement, and threats. It is of critical importance
when element of the company policy cannot be enforced by technical means.