The MAJOR advantage of the risk assessment approach over the baseline approach to information security management is that it ensures: 
A、information assets are overprotected. 
B、a basic level of protection is applied regardless of asset value. 
C、appropriate levels of protection are applied to information assets. 
D、an equal proportion of resources are devoted to protecting all information assets.