What is a valid reason to take an action as a policy?

A.
An operator needs to be notified upon a failure.

B.
An operator needs to define the criteria for applicability.

C.
An operator needs to keep the anti-virus definition up to date.

D.
An operator needs to deploy an application to one system within one day.