Which activity is most closely related to security policy?

A. using one shared account for everyone B. removing all documentation C. a high-level management statement for information security D. disabling audit logs