28. What is the primary objective of data security controls?

a. To establish a framework for controlling the design, security, and use of computer programs throughout an organization.

b. To ensure that storage media are subject to authorization prior to access, change, or destruction.

c. To formalize standards, rules, and procedures to ensure that organization’s controls are properly executed.

d. To monitor the use of system software to prevent unauthorized access to system software and computer programs.