Which of the following are benefits of having written security procedures for information systems?
A. Written security procedures support continuity of operations
B. All listed choices are correct.
C. Written procedures can be used to cross-train personnel and assure replacements can perform the required tasks in a secure fashion.
D. Written procedure can be used to evaluate compliance with security controls.
