Where are agreements regarding Security Management recorded?

Where are agreements regarding Security Management recorded?

A.
in a Service Level Agreement (SLA)

B.
in a Configuration Management Database (CMDB)

C.
in a Capacity Plan

D.
in a Definitive Software Library (DSL)