CompTIA Security+ Exam Prep

Answer: C - The Security Act of 1987 requires U.S. federal agencies to identify computer systems that contain sensitive information. The agency must develop a security policy and plan for each of these systems and conduct periodic training for individuals who operate, manage, or use these systems. Federal agency employees must be provided with security-awareness training and be informed of how the agency defines acceptable computer use and practices.