Which role does security plan play in protecting information resources?

A. deleting backup copies without approval B. ignoring risks and controls C. disabling audit logs D. documenting controls, responsibilities, and protection requirements