In an information assurance program, why is NIST Risk Management Framework important?

A. treating all information as public B. sharing passwords publicly C. categorize, select, implement, assess, authorize, and monitor D. disabling audit logs