Answer: C - An Identity Theft Prevention Program must include details covering the ways an organization will stay up-to-date on measures to detect new threats, actions an organization will take when potential warming of identity theft is detected and reasonable procedures used to identify suspicious activities which may warn the organization of identity theft.
The Identity Theft Prevention Program need not contain procedures for reporting the suspected use of fake IDs to third-party marketing partners.