Which is the worst that may happen if information security policies are out of date, or address technologies no longer used in the organization?

Question 7 options:

	People may take the policies less seriously, or dismiss them entirely
	Executive management may become upset
	The company may incur unnecessary costs to change them
	People may not know which policy applies