An information systems security program is:

a. A one-shot investigation to determine the state of logical and physical security

b. A specialized piece of software used to monitor and control access to information systems assets

c. The evidence collection and evidence evaluation procedures auditors use to evaluate how well hardware and software are safeguarded

d. A series of ongoing, regular, periodic evaluations conducted to ensure information systems assets are safeguarded adequately