A security policy is the crux of a companys overall security program. Which of the following is true regarding the visibility of the security policy?

a. The security policy should be integrated in all decision-making procedures and should be highly visible only to middle and senior management, since it is senior managements directive.

b. The security policy should be integrated in all decision-making procedures and should not be highly visible to middle and senior management, since it is senior managements directive.

c. The security policy should be integrated in all decision-making procedures and should be highly visible to all employees, since it is senior managements directive.

d. The security policy should be integrated in all decision-making procedures and should not be highly visible to all employees, since it is senior managements directive.