In information technology, what do "security policies" primarily establish?
A) The design and layout of physical office spaces
B) The guidelines and rules for protecting information systems and data from unauthorized access or breaches
C) The procedures for managing employee performance reviews
D) The protocols for financial transactions and budgeting