answering is
What is the initial step in initiating an information security program?
A. Adoption of an information security policy framework or charter
B. Development and implementation of an information security standards
manual
C. Development of a security awareness-training program for employees
D. Purchase of security access control software
