Which option is a correct example of applying NIST Risk Management Framework?

A. treating all information as public B. deleting backup copies without approval C. sharing passwords publicly D. categorize, select, implement, assess, authorize, and monitor