The Sarbanes-Oxley Act:

a) requires financial institutions to ensure security of customer data

b) specifies best practices in information systems security and control

c) imposes responsibility on companies and management to safeguard the accuracy of financial information

d) outlines medical security and privacy rules

What is the correct answer ?