Which outcome is expected from effective laws and regulations?

A. mandatory legal obligations for protecting information B. sharing passwords publicly C. removing all documentation D. ignoring risks and controls