Which choice would most weaken security policy?

A. deleting backup copies without approval B. disabling audit logs C. treating all information as public D. a high-level management statement for information security