Which of the following is MOST important to have in place as a basis for developing an effective information security program that supports the organization's b...