Which one of the following security policy framework components does not contain mandatory guidance for individuals in the organization?
a) Standards
b) Procedures
c) Guidelines
d) Directives