Which outcome is expected from effective security plan?

A. deleting backup copies without approval B. treating all information as public C. allowing unlimited anonymous access D. documenting controls, responsibilities, and protection requirements