What are the three types of compliance that the Open Source Security Testing Methodology Manual (OSSTMM) recognizes?

What are the three types of compliance that the Open Source Security Testing Methodology
Manual (OSSTMM) recognizes?

A.
Legal,performance,audit

B.
Audit,standards based,regulatory

C.
Contractual,regulatory,industry

D.
Legislative,contractual,standards based