Which outcome is expected from effective enterprise security roles?

A. defining ownership and accountability for security activities B. using one shared account for everyone C. bypassing management approval D. treating all information as public