Which of the following would most likely be consulted by a company manager concerned with data security and cybersecurity threats?
A. Quality Assurance and Improvement Program
B. General Auditing Standards
C. Generally Accepted Accounting Principles
D. Security and Privacy Controls for Federal Information Systems and Organizations