Which of the following should be part of an effective information security program?
A . Pre-employment screening
B . Nondisclosure agreements from employees
C . Employee awareness programs
D . Policy and procedural statements on the recognition, classification, and handling of sensitive information
E . All of the above
Answer: E