Local guidelines require that all information systems meet a minimum security baseline to be compliant. Which of the following can security administrators use to assess their system configurations against the baseline?


A. SOAR playbook
B. Security control matrix
C. Risk management framework
D. Benchmarks