Which statement best describes enterprise security roles?

A. treating all information as public B. defining ownership and accountability for security activities C. deleting backup copies without approval D. removing all documentation