CompTIA Security+ (SY0-701) SY0-701 — Question 526

An organization is developing a security program that conveys the responsibilities associated with the general operation of systems and software within the organization. Which of the following documents would most likely communicate these expectations?