A Security Plan Should Address Which Of The Following?

A.    Incident Response Capabilities
b.    Certification & Accreditation Policy
c.    Roles and Responsibilities
--> d.    All of the above