Select ALL the correct responses. The purpose of the Information Security Program is multi-faceted. Which of the following objectives does the program achieve?

- Provide guidance on how to classify, store, transport, and destroy information Correct

- Promote the declassification of information no longer requiring protection Correct

- Ensure the proper classification, protection, and downgrading of national security information

Explanation:

Designing an information security program for a company or any organization means to design and implement various security practices in order to protect the critical business processes and data. An information security program also defines various policies as well as procedures for assessing risk, mitigating attacks and monitoring threats. Further it also guarantees protection and proper classification of national security information.