A(n) ____ is a plan or course of action used by an organization to convey instructions from its senior management to those who make decisions, take actions, and perform other duties on behalf of the organization. Select one:
a. policy
b. assessment
c. business continuity plan
d. residual risk