Which of the following is NOT a valid statement to include in an organisation's security policy?

Which of the following is NOT a valid statement to include in an organisation’s security policy?

Which of the following is NOT a valid statement to include in an organisation’s security policy?
A . The policy has the support of Board and the Chief Executive.
B . The policy has been agreed and amended to suit all third party contractors.
C . How the organisation will manage information assurance.
D . The compliance with legal and regulatory obligations.

Answer: C