Which activity is most closely related to security plan?

A. documenting controls, responsibilities, and protection requirements B. allowing unlimited anonymous access C. removing all documentation D. ignoring risks and controls