An organization adopts a control framework to align security investments with business objectives and to communicate maturity to the board. Which document type guides that strategic alignment?

Pick an option to reveal the answer.