A security policy would include all of the following EXCEPT A. Background B. Scope statement C. Audit requirements D. Enforcement