Which of the following is a security policy implemented by an organization due to compliance, regulation, or other legal requirements?

A. Advisory policy
B. Informative policy
C. System Security policy
D. Regulatory policy