5. The Boston Ranger Company is currently working on updating its information Security Policies and Procedures (P&P). As to the purpose of such P&P, which of the following is a false statement?

A) Describes ways to prevent and respond to a variety of threats to information and IS (e.g., unauthorized access, disclosure, loss, misuse, denial of us, etc)

B) Defines security practices that align to the strategic objectives of the organization

C) Guides management, users, and system designers in making decisions about information security.

D) Helps managers, executives, and auditors discharge fiduciary responsibilities, understand their IT systems and decide adequate levels of security and controls.