What is the primary purpose of NIST Risk Management Framework in information assurance?

A. removing all documentation B. sharing passwords publicly C. categorize, select, implement, assess, authorize, and monitor D. ignoring risks and controls