Which of the following acts related to information security in the US establish that the management of an organization is responsible for establishing and maint...