Ensuring that the people responsible for protecting the company’s assets are actually driving the program is an example of:

A.
The Delphi approach

B.
The top-down approach

C.
The bottom-up approach

D.
The technology-driven approach

Explanation:
A security program should use a top-down approach, meaning the
initiation, support, and direction come from top management and work their way down
to middle management and staff members.