Which type of policy is frequently codified as standards and procedures to be used when configuring or maintaining systems?

Group of answer choices

Systems$-$specific security policy $($SysSP$)$

Enterprise information security policy $($EISP$)$

Issue$-$specific security policy $($ISSP$)$

None of the options are correct

Automated policy $($AP$)$