progress of answering is
Which of the following is NOT true of policies?
A. Policies are what are called 'directive' controls
B. Policies are often a collection of ideas
C. Policies prescribe how an organization manages, protects, and distributes information
D. Policies direct or mandate the behavior of the employees of the organization
