An effective implementation of security roles and responsibilities is BEST evidenced across an enterprise when:

A. operational activities are aligned with policies.
B. policies are signed off by users.
C. policies are rolled out and disseminated.
D. reviews and updates of policies are regularly performed.