In order to ensure that policy is implemented in a thoughtful manner, it is recommended that the security manager form ____. It should include people from compliance, information security, HR, audit, leadership from other business units, and project managers (PMs). Doing so will ensure that policies are implemented using an integrated approach. A. a diversified operating model B. a unified operating model C. an organizational culture D. a policy change control board or committee