What problem does security plan mainly help address?

A. disabling audit logs B. documenting controls, responsibilities, and protection requirements C. bypassing management approval D. allowing unlimited anonymous access