NO$\mathrm{.}323$ An organization has an acceptable use policy in place, but users do not formally acknowledge the policy. Which of the following is the MOST significant risk from this finding?$($A$).$ Lack of data for measuring compliance$($B$).$ Violation of industry standards$($C$).$ Noncompliance with documentation requirements$($D$).$ Lack of user accountability