Which one of the following acts related to the information security in the US fix the responsibility of management for establishing and maintaining an adequate...