Which of the following can be performed when an element of the company policy cannot be enforced by technical means?

Which of the following can be performed when an element of the company policy cannot be
enforced by technical means?

A.
Develop a set of standards

B.
Separation of duties

C.
Develop a privacy policy

D.
User training