An entity's security program must address all but the following:
A) its users' security awareness
B) procedural guidance and training
C) compliance incentives
D) business process improvement
E) compliance monitoring.

Question

Quizplus · Accepted Answer

While business process improvement is important for overall organizational efficiency, it is not directly related to security. The other options listed are all necessary components of a comprehensive security program.

An Entity's Security Program Must Address All but the Following