A.Principles are designed to provide detailed controls over regulatory requirements

B.Policies express the core values of the enterprise

C.Principles are designed to achieve the stated purpose

D.Policies provide detailed guidance to influence decision making

A.Align, Plan and Organize (APO)

B.Deliver, Service and Support (DSS)

C.Build, Acquire and Implement (BAI)

A.Cyber Security Framework

B.Skills Framework for the Information Age

C.Sans Security Policy Framework

A.Manage Continuity

B.Manage Operations

C.Manage Risk

D.Manage Availability and Capacity

A.Support

B.Strategic

C.Turnaround