______________________ created a comprehensive standard to help any organization create an information security governance program.
a. The Federal Trade Commission
b. The Government Accountability Office (GOA)
c. The International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC)
d. National Institute of Standards and Technology (NIST)
