Which of the following processes is used to align security controls with business functions?

A. Data mapping
B. Standards selection
C. Scoping
D. Tailoring