Which of the following should be a common element in any level of security policy? $($Choose all that apply.$)$

Complex passwords

Backup procedures

Data encryption

Virus protection