Q60
Single choice
When creating a security program, which approach would be used if senior management is supporting and enforcing the security policy?