Which of the following statements is not true in regard to an information security program?
A . The information security program is an attempt to make theft of sensitive information difficult, not necessarily to eliminate it.
B . The protection afforded against losses by either internal or external sources is, at best, limited.
C . A good information security program will provide total protection from industrial espionage.
D . A trust relationship must be established and maintained with employees.
E . The good will and compliance of employees is crucial for success.
Answer: C