What is the main benefit of having a security policy?

A.
To align with business priorities and minimize implementation costs

B.
To form the basis of an ongoing Information Lifecycle Management strategy

C.
To initiate legal proceedings against intruders, external or internal

D.
To specify which products and vendors are needed for implementation