True or false The Security Rule requires that a risk analysis, risk management, and a sanction policy be in place.
a) True.
b) False.