Which of the Following Best Describes the Organizational Normative Framework

Which of the following best describes the Organizational Normative Framework (ONF) ?

A) A set of application security, and best practices, catalogued and leveraged by the organization
B) A container for components of an application's security, best practices catalogued and leveraged by the organization
C) A framework of containers for some of the components of application security, best practices, catalogued and leveraged by the organization
D) A framework of containers for all components of application security, best practices, catalogued and leveraged by the organization.