What are security control baselines (Low/Moderate/High) used to determine?

• A. The maximum possible controls to be implemented.
• B. The security controls that must never be changed.
• C. The initial set of controls selected based on the system's impact level.
• D. The budget for security tools.

Answer: (C)