Option D is wrong, help me find the correct option

QUESTION 10 In the absence of a cybersecurity theory, we have security standards, frameworks and best practices An example of bost practices is to use a password of a certain composition and strength, such as minimum 8 characters to specify the use of NIST cybersecurity framework for Foderal Govemment computers to have product specs written by vendor on every security product or in a document to use Cisco Security Framework