A case study in Security Policies and Awareness mentions approved deviation from a policy with documented justification. Which answer is most accurate?

A. Data handling policy B. Availability C. Incident reporting policy D. Policy exception