During the initiation phase of the system development life cycle (SDLC) for a software project, information security activities should address:

A. baseline security controls.
B. cost-benefit analyses.
C. benchmarking security metrics.
D. security objectives.