What key lesson below was identified by your author in chapter 1 from studying the many FTC complaints for data and security breaches by businesses?

A. Companies should immediately dispose of payment card data once it is no longer necessary for business purposes.

B. Companies should routinely audit their systems to ensure that unauthorized software has not been installed by a third party.

C. As companies increasingly accept payment card information via apps, they should ensure that they accept all of the default app store security settings unless they have a valid reason to do otherwise.

D. Employees should have only the authorization that is necessary for them to perform their jobs

E. Companies that collect and store credit card information should always encrypt the data, particularly if they promise security in their privacy policies.

F. All of the above.