In which of the following categories would creating a corporate privacy policy, drafting acceptable use policies,
and group based access control be classified?

A.
Security control frameworks

B.
Best practice

C.
Access control methodologies

D.
Compliance activity

Explanation:
Best practices are based on what is known in the industry and those methods that have consistently shown
superior results over those achieved by other means. Furthermore, best practices are applied to all aspects in
the work environment.