What is a Standard Operating Procedure $($SOP$)?$

A$.$Policies that include privilege management, data$/$information handling, incident response, and use of company devices

B$.$A measure by which to evaluate compliance with the policy

C$.$General instructions for when situations have not been fully assessed or because the decision$-$making process is too complex

D$.$An inflexible, step$-$by$-$step listing of the actions that must be completed for any given task