The California Security Breach Information Act (SB-1386) is a state law requiring organizations that maintain personal information about individuals to inform those individuals if the security of their information is compromised. Which of the following is the least likely step that organizations in California can take to comply with the Act? Select one: O a. Identify the location of all databases that contain personal information and implement access controls and physical security measures for data security. b. Review arrangements with all third parties who store, process or transmit personal information and take steps to require them to adopt equivalent measures. c. Develop and implement procedures for rapid assessment of suspected security breaches, referral of suspected criminal acts to law enforcement agencies, notification of affected California residents and for appropriate public announcements to stakeholders and other interested parties to minimize the negative impact of the security breach. d. Appoint a bank lawyer or legal personnel to ensure SB-1386 compliance. O O Which of the following is not a duty of the PCAOB (Public Company Accounting Oversight Board) under the Sarbanes-Oxley Act of 2002? Select one: o a. The PCOAB has a duty to register public accounting firms that audit publicly traded companies. 0 b. The PCOAB has a duty to establish or adopt auditing, quality control, ethics, independence and other standards relating to audits of publicly traded companies. c. The PCOAB has a duty to ensure that all audit work papers of CPA firms are maintained for at least seven years. O d. The PCOAB has a duty to conduct an inspection once every three years of CPA firms that regularly audit more than 100 public companies