The following are non -Adversarial Threat Sources except

___________ type of control that specify acceptable rules of behavior within an organization.

__________ is a company’s statement disclosing to its customers how their information is gathered, managed, used and disclosed to others.

At which stage of an adversarial threat attack does the attacker craft phishing and other attacks and counterfeit entities, create and operate false-fronts to inject malicious components?

Which of the following encapsulates people, processes and products to identify and manage the data used in an organisation system to authenticate users and manage access rights to data and system resources?