Defining the scope of the plan is the very first step in the overall process. Security should be included from the very earliest stages and throughout the entire process. Bringing in security at a later stage can lead to additional costs and time delays to compensate for gaps in planning. Risk assessment, requirements gathering, and analysis are all later steps in the process, and adding in security at any of those points can potentially cause increased costs and time delays.

Explanation
Metadata is data about data. It contains information about the type of data, how it is stored and organized, or information about its creation and use.

All the elements except adjudication need to be addressed in each policy. Adjudication is not an element of policy.