Which of the Following Statements Is Not True in Regard

Which of the following statements is not true in regard to an information security program?

A) The information security program is an attempt to make theft of sensitive information difficult, not necessarily to eliminate it.
B) The protection afforded against losses by either internal or external sources is, at best, limited.
C) A good information security program will provide total protection from industrial espionage.
D) A trust relationship must be established and maintained with employees.
E) The good will and compliance of employees is crucial for success.