Which field is like an FYI and generally means that a reply isn't expected?

Much of personnel security rests on maintaining ____ that complies with all rules and regulations.

A. behavior B. compliance C. an attitude D. a control set

List four of the nine recommendations in the EBK for a secure procurement process.

What will be an ideal response?