Which option is a correct example of applying security plan?

A. choosing office wall colors B. deleting backup copies without approval C. disabling audit logs D. documenting controls, responsibilities, and protection requirements