$2.$ You are tasked with designing a security policy for cardholder data. Which of the following are recommended security strategies for cardholder data? $($Select three.$)$

$-$ A$.$ Verify that data is retained for a limited period of time.$$

$-$ B$.$ Verify that user groups are used to access sensitive data areas.$$

$-$ C$.$ Verify that data is disposed of properly.$$

$-$ D$.$ Verify that passwords are encrypted during transmission.