In an information assurance program, why is security policy important?

A. treating all information as public B. using one shared account for everyone C. bypassing management approval D. a high-level management statement for information security