If an organization has its own information systems staff but insufficient security work exists to justify a separate security administration position, responsibility for security matters might be vested in the:

a. Controller

b. Computer operations manager c .Systems analysis manager

d. Internal auditor