Which of the following best describes the Organizational Normative Framework (ONF)?

A set of application security, and best practices, catalogued and leveraged by the organization

A container for components of an application’s security, best practices catalogued and leveraged by the organization

A framework of containers for some of the components of application security, best practices, catalogued and leveraged by the organization

A framework of containers for all components of application security, best practices, catalogued and leveraged by the organization.