Information Security: Please explain what are the following and their purpose:

A) written descriptions of information security processes and activities

B) controls documentation

C) risk assessment methods and reports

D) a risk treatment plan and a Statement of Applicability detailing the information security control objectives