Which statement best describes organizational security?

A. assigning roles, duties, and governance responsibilities B. bypassing management approval C. allowing unlimited anonymous access D. choosing office wall colors