Ensuring an organization has the highest level of security is a daily exercise for security professionals. Which best practice for access control involves monitoring to identify new activities that are allowed, such as use of new software?

A$.$ Creating guidelines and policies that are easy to understand and implement

B$.$ Providing strong security

C$.$ Assessing activities on a continuous basis

D$.$ Establishing a baseline