A _____ is a written statement describing which assets to protect and why they are being protected, who is responsible for that protection, and which behaviors are acceptable and which are not:
A. cypher text
B. security policy
C. digital signature
D. plain text
