Which of the following does a user not need to be aware of regarding their organizations information security policy?
A.
The people involved in establishing the security policy
B.
The definition of the organization�s security policy
C.
The actions that need to be performed in case of a disaster
D.
Who monitors compliance to the organization�s security policy
Explanation:
Only personnel directly involved in the disaster recovery plan should
have a copy of the plan, whereas all employees should be aware of the contents of
the organizations general security policy.