What is an information security policy? a. A policy that defines acceptable behavior by customers b. A policy that defines what uniforms should be warn by guards c. Collections of documents that outline controls, actions and processes to protect information systems d. Document that defines what type of hardware to purchase by the organization