Answer:
A. True
Step-by-step explanation:
A baseline may be defined as the minimum amount of security that a network, a device or a system must adhere to. They are generally mapped to the industry standards. It is applied to the several layers of the IT infrastructure of an organization.
When developing them, it is very important to make use of the industry best practices. It enables to justify the choices that are being made to the regulators.
Hence the answer is true.