What is the primary purpose of security standards in information assurance?

A. ignoring risks and controls B. documented security requirements or accepted practices C. sharing passwords publicly D. deleting backup copies without approval