Under the GLBA Interagency Guidelines, what are some ways that institutions can manage and control risk?

A. 1) Train employees, 2) regularly test controls and systems, 3) properly dispose of customer information, 4) Provide adequate oversight of service providers security measures; 5) adjust information security programs as new threats arise; and 6) report any material matters to the board.

B. 1) Train service providers, 2) regularly purchase new equipment, 3) properly dispose of employee information, 4) Provide adequate oversight of employee and service providers security measures; 5) anticipate how to handle the media as new threats arise; and 6) report any material matters to the public within 24 hours.

C. 1) Train customers, 2) regularly test service provider information, 3) properly dispose of Service provider provided information, 4) Provide adequate oversight of service providers communication measures; 5) adjust physical security plans as new threats arise; and 6) report any matter to the board.

D. None of the above.