In a Dispersed Network That Lacks Central Control, Which of the Following

In a dispersed network that lacks central control, which of the following is the PRIMARY course of action to mitigate exposure?

A) Implement security policies and standards, data backups, and audit controls
B) Implement management policies, audit control, and data backups
C) Implement security policies and standards, access controls, and access limitations
D) Implement remote access policies, shared workstations, and log management