Which of the following is the BEST way to ensure that contract programmers comply with organizational security policies?
A. Have the contractors acknowledge the security policies in writing.
B. Perform periodic security reviews of the contractor.
C. Explicitly refer to contractors in the security standards.
D. Create penalties for noncompliance in the contracting agreement.