Which of the following should be a part of an organization’s policy regarding email attachments?
A) Attachment should be expected.
B) Email source should be confirmed.
C) Attachment appears to be a legitimate business document.
D) All options are correct.