When would it be more desirable to develop a set of decentralized security policies and procedures within an enterprise environment?
A . When there is a variety of technologies deployed in the infrastructure.
B . When it results in an overall lower cost of operating the security program.
C . When there is a need to develop a more unified incident response capability.
D . When the enterprise is made up of many business units with diverse business activities, risks profiles and regulatory requirements.
Answer: D