It is important to develop an information security baseline because it helps to define:

A.
critical information resources needing protection.

B.
a security policy for the entire organization.

C.
the minimum acceptable security to be implemented.

D.
required physical and logical access controls.

Explanation:
Developing an information security baseline helps to define the minimum acceptable security that will be implemented to protect the information resources in accordance with the respective criticality levels. Before determining the security baseline, an information security manager must establish the security policy, identify criticality levels of organization’s information resources and assess the risk environment in which those resources operate.