Which of the following indicate that the culture of an organization is adopting IT security policies?
A. Security policies are part of routine daily interaction.
B. Security policies are supported by organizational committees.
C. Security policies' core values are demonstrated in workers' instinctive reactions to situations.
D. All of the above