Which role does security procedure play in protecting information resources?

A. disabling audit logs B. a detailed set of steps to implement a policy C. allowing unlimited anonymous access D. ignoring risks and controls