NIST SP 800-53r4 on security controls, not leaving computers on overnight, and password enforcement are examples of

a. use of Federal Government guidelines.
b. use of recommendations, experience and best practices respectively.
c. use of industry standards.
d. use of best practices.