Which of the following sets of policies or procedures is NOT a requirement of a security program?
A. Policies addressing what to do in case of a robbery
B. Procedures for opening the bank at the beginning of the day
C. Procedures for keeping customer information private
D. Policies addressing periodic reporting to the board of directors