Which of the following choices is NOT part of a security policy?

A.
definition of overall steps of information security and the importance of security

B.
statement of management intend, supporting the goals and principles of information security

C.
definition of general and specific responsibilities for information security management

D.
description of specific technologies used in the field of information security