To assess the effect that information security changes will have on the organization’s personnel management practices, the organization should conduct which of the following studies before the implementation phase?
a. Security audit
b. Project feasibility
c. Behavioral feasibility
d. Employee feedback