Which of the following should be the FIRST step for executive management to take in communicating what is considered acceptable use with regard to personally owned devices for company business?

A. Post awareness messages throughout the facility.
B. Develop and disseminate an applicable policy.
C. Provide training on how to protect data on personal devices.
D. Require employees to read and sign a disclaimer.