Which of the following tools BEST demonstrate the effectiveness of the information security program?

A. A security balanced scorecard
B. Management satisfaction surveys
C. Risk heat map
D. Key risk indicators (KRIs)