How does security procedure support governance and compliance?

A. a detailed set of steps to implement a policy B. disabling audit logs C. allowing unlimited anonymous access D. ignoring risks and controls