Organizations seek to create a coherent set of documents that are stable and immune to the need for regular adjustments. however, the types of policy documents can differ, depending on the organization. which of the following is not one of the reasons why these documents might vary from one organization to the next?

a. organizations seldom have both baseline standards and control standards; it is more common to have or one the other.
b. it department size differs based on the needs of the business.
c. risk management practices are often created specifically for the organization.
d. organizations use distinctive sets of hardware and technical tools