The information security function in a large organization is MOST effective when:

A. decentralized as close to the user as possible.
B. the function reports directly to the IS operations manager.
C. partnered with the IS development team to determine access rights.
D. established at a corporate-wide level.