Which of the following is NOT an objective of the security program?

A. Security organization
B. Security plan
C. Security education
D. Information classification