Which of the following is a security policy implemented by an organization due to compliance, regulation, or other legal requirements?

A.
Advisory policy

B.
Informative policy

C.
System Security policy

D.
Regulatory policy