An organization has started allowing employees to use their personal smart devices to accept vendor payments. What should the organization's bring$-$your$-$own$-$device $($BYOD$)$ policy include to specifically address security and privacy required by the Payment Card Data Security Standard $($PCI DSS$)?$ A$.$ Approved devices B$.$ Mobile applications C$.$ Data storage. D$.$ Backups and transfers