In an information assurance program, why is security plan important?

A. bypassing management approval B. documenting controls, responsibilities, and protection requirements C. ignoring risks and controls D. disabling audit logs