Agencies do NOT report an information security incident is because of:
A . Afraid of negative publicity
B . Have full knowledge about how to handle the attack internally
C . Do not want to pay the additional cost of reporting an incident
D . All the above
Answer: A