Which element of the security policy framework requires approval from upper management and applies to the entire organization?

A. Policy
B. Standard
C. Guideline
D. Procedure