Company A acquired Company B and they realize that their standard security policy documents do not match. They escalate this issue to the company's central security team, who implements a plan to formalize security strategy, high-level responsibilities, policies and procedures around security. Which security principle is illustrated in this example?
A. compliance
B. governance
C. availability
D. risk management