21) T or : It is not imperative that a computer security policy address access limit 22) Tof: Computer security policy statements, generally allow all IT personnel access to organizational systems and resources 23) E: A computer security policy statement should have the following (a) Organization's goals (b) Designated responsibility (C) risk analysis (d) Organization's commitment 24 One of the purposes of the assessment of the current security status is to recommend improvement (b) identify vulnerability cut cost (d) account for of the system is in and the things that