What is an important guideline to follow when considering security audit and security compliance
scenarios?

A.
Avoid consolidating audit information, as that can dilute the value of the collected information
and possibly render it useless

B.
Align the scope with the capabilities of Tivoli Security Compliance Manager, compliance of
servers and desktops to stated security policies

C.
Avoid considering all rules, regulations, laws and internal customer requirements, as this can
consume a lot of time while not yielding much useful information

D.
Consider compliance from multiple points of view, including desktop security, server security,
access control policy, provisioning policy, authentication policy and risk management policy