What is the primary purpose of security procedure in information assurance?

A. ignoring risks and controls B. choosing office wall colors C. removing all documentation D. a detailed set of steps to implement a policy