What is the purpose of a security policy?

Question $64$ options:

to allow for authorization and authentication

to establish an awareness training program for employees

to mandate when to rehearse a disaster recovery $($DR$)$ drill

to know how to choose an alternate site when hit by a security breach