How does security policy support governance and compliance?

A. deleting backup copies without approval B. disabling audit logs C. a high-level management statement for information security D. sharing passwords publicly