Which of the following are examples of some of the responsibility of a corporate CSIRT and the policies it helps create?

Which of the following are examples of some of the responsibility of a corporate CSIRT and the policies it helps create? (Choose four)
A. Scanning vendor customer network
B. incident classification and handling
C. Information classification and protection
D. Information dissemination
E. Record retentions and destruction