An organization maintains a minimum set of recommended settings for each security control to safeguard the Confidentiality, Integrity, and Availability (CIA) of information and information assets. The organization also performs scoping and tailoring activities to meet the security properties of a given configuration. Which of the following BEST describes the situation outlined in the scenario?
A Security guidelines
B Security baselines
C Security standards
D Security procedure