Policy Description Based on Requirement is best described as:

• A. It focuses on encryption and user management.
• B. This concept defines the roles, responsibilities, and functions of a security policy.
• C. It describes system hardware requirements.
• D. It outlines physical security controls.

Answer: (B)