Which option is a correct example of applying security standards?

A. documented security requirements or accepted practices B. treating all information as public C. using one shared account for everyone D. ignoring risks and controls