CCCURE培训网站里关于信息安全管理的一道题的解题分析

What is the main purpose of Corporate Security Policy?

A:to transfer the responsibility for the information security to all users of the organization

B:to communicate managements intentions in regards to information security

C:to provide detailed steps for performing specific actions

D:to provide a common framework for all development activities

选什么？为什么？

我也觉得是B。Policy 吗，应该是条文、规定类的。
我的分析
A.