What problem does organizational security mainly help address?

A. treating all information as public B. removing all documentation C. assigning roles, duties, and governance responsibilities D. ignoring risks and controls