A security manager has noticed an inconsistent application of server security controls resulting in
vulnerabilities on critical systems. What is the MOST likely cause of this issue?

A.
A lack of baseline standards
B.
Improper documentation of security guidelines
C.
A poorly designed security policy communication program
D.
Host-based Intrusion Prevention System (HIPS) policies are ineffective