Which of the following is not a likely reason that specific password requirements, such as length, the use of special characters and the like, are usually guidelines in an organization rather than policies?A) The specific password requirements can be changed more easily as needed if they are guidelines rather than policies.
B) Password guidelines are usually created and maintained by the IT department, which is in a better position to know best practices in password security.
C) Policies are created at a higher level in the "chain of command" and as such cannot be changed quickly in response to a particular security need.
D) Policies are not typically concerned with broad topics such as IT security and passwords.