[tagged]
Some security measures are optional. Other security measures must always be implemented.
Which measure(s) must always be implemented?

A.
Clear Desk Policy

B.
Physical security measures

C.
Logical access security measures

D.
Measures required by laws and regulations