What is the primary purpose of security plan in information assurance?

A. documenting controls, responsibilities, and protection requirements B. removing all documentation C. allowing unlimited anonymous access D. bypassing management approval