An information security steering group should:

A. provide general oversight and guidance.
B. develop information security policies.
C. establish information security baselines.
D. oversee the daily operations of the security program.