Which Statement Is False Regarding the Use of Technical Security

Which statement is false regarding the use of technical security controls?

A) Most privacy legislation enumerates the types of technical security controls that must be implemented
B) Technical security controls are part of a data governance strategy
C) Technical security controls deployed for one jurisdiction often satisfy another jurisdiction
D) A security engineer should be involved with the deployment of technical security controls