The Chief Information Officer (CIO) wants to improve the security of the company’s data. Which of the
following is a management control that should be implemented to ensure employees are using encryption to
transmit sensitive information?

A.
Policies

B.
VPN

C.
HTTPS

D.
Standards