Which Security Policy Establishes an Organization's Need to Take Reasonable

Multiple Choice

Which security policy establishes an organization's need to take reasonable precautions to demonstrate that it is being responsible in its operations (and to avoid possible litigation) ?

A) AUP
B) E-mail policy
C) Due diligence
D) Separation of duties