Which of the following methods BEST ensures that a comprehensive approach is used to direct information security activities?

A. Creating communication channels
B. Promoting security training
C. Establishing a steering committee
D. Holding periodic meetings with business owners