Your organization needs to implement an organizational security policy. You are reviewing the security standards from different international bodies. Which rule should apply when using these standards?

A. Implement the standards exactly as stipulated by the international body.
B. Submit formal change requests for the standards when they do not meet the needs of your organization.
C. Customize the standards to fit the needs of your organization.
D. Only apply the standards of a single international body.

C

Explanation: You should customize the standards to fit the needs of your organization.