Which of the Following Is NOT a Purpose of the ISO/IEC

Which of the following is NOT a purpose of the ISO/IEC 17799 (later 27002) standard?

A) To give recommendations for information security management for use by those who are responsible for initiating, implementing, or maintaining security in their organization.
B) To provide a common basis for developing organizational security standards
C) To provide effective security management practice and to provide confidence in interorganizational dealings
D) All of these are correct