A company is migrating to the cloud and needs to implement a security policy. Which of the following should the company implement?

A redundancy strategy addresses high availability by duplicating components but does not constitute a comprehensive security policy for a cloud migration.

An integration strategy focuses on connecting systems and services together but does not address the security protections and controls required for the cloud environment.

A disaster recovery strategy defines how data and services are protected and restored in the event of disruption, which is a core security policy requirement during cloud migration. It establishes backup policies, recovery time objectives (RTO), and recovery point objectives (RPO) to ensure the organization can recover from incidents. Establishing this strategy during migration ensures the cloud environment meets the organization's security and resilience requirements from day one.

A patching strategy manages software vulnerabilities through updates but represents only one narrow component of security rather than a complete security policy for migration.