In which of the following categories would creating a corporate privacy policy, drafting acceptable
use policies, and group based access control be classified?

A.
Security control frameworks

B.
Best practice

C.
Access control methodologies

D.
Compliance activity

Explanation:
Best practices are based on what is known in the industry and those methods that have
consistently shown superior results over those achieved by other means. Furthermore best
practices are applied to all aspects in the work environment.