Tom is the chief information security officer for a medium$-$sized business. It$$s been brought to his attention that the company has been storing its backup systems images and database backups in an offsite facility that has no alarm system and no way of knowing whether there were any unauthorized persons entering that facility. Which of the following might apply to this situation? This type of question contains radio buttons and checkboxes for selection of options. Use Tab for navigation and Enter or space to select the option. option A This could be a failure of due care in that the security requirement for the backup information should have been specified and implemented in the storage plan and contracts. option B This could be a case of failing to perform both due care and due diligence. option C This is at least a failure of due diligence, since there seems to have been no systematic or periodic check of the storage facility or the backup media stored in it$.$ option D Since there are no records to check to see if any unauthorized persons had access to these backups, there has been no due diligence lapse.