As part of the ongoing information security plan in a large software development company, the
Chief Information officer (CIO) has decided to review and update the company’s privacy policies
and procedures to reflect the changing business environment and business requirements.
Training and awareness of the new policies and procedures has been incorporated into the
security awareness program which should be:
A.
presented by top level management to only data handling staff.
B.
customized for the various departments and staff roles.
C.
technical in nature to ensure all development staff understand the procedures.
D.
used to promote the importance of the security department.