Select all that apply.

• A

  punish organizations that do not comply

• B

  reduce an organization's security risk

• C

  create worldwide standards for all organizations to follow

• D

  protect the interests of an organization's clients