Which group$($s$)$ of people are responsible for facilitating the information security program that protects the organization's ability to function?

a$.$ IT Management

b$.$ General Management

c$.$ Information Security Management

d$.$ All of the above.