Which of the following is the least objectionable when dealing with policies with regard to outdated technology?
A. Write security policies to best practices and issue a policy waiver for outdated technology that inherently cannot comply.
B. Write security policies to the lowest, most common security standard the technology can support.
C. Write different sets of policies for outdated technologies.
D. All of the above