What is a security policy?

A. A document with a rigid set of rules created so that people follow it explicitly to be effective and avoid technical problems

B. A technical control used to enforce security

C. A physical control used to enforce security

D. A document created by senior managers that identifies the role of security in the organization and is used as a defense mechanism to protect the assets of the organization