A Security Policy is: a. How we implement security b. Corporate direction on behavior c. A statement of consequence for failure to obey d. A statement describing how we intend to manage a specific security activity e. None of the above

A Security Policy is: d. A statement describing how we intend to manage a specific security activity

Explanation:

A Security Policy is a document written in a format recognized by an organization that explains how the organization is going to carry on a process of maintaining the security of a specific task developed by the organization. So option a is incorrect because it is not a document written and recognized by the organization in the matter. The rest is false because b is code o conduct, and c a rule.