In an information assurance program, why is organizational security important?

A. allowing unlimited anonymous access B. disabling audit logs C. removing all documentation D. assigning roles, duties, and governance responsibilities