Which of the following is MOST important for an information security manager to ensure is included in a business case for a new system?

A. Intangible benefits of the system
B. Risk associated with the system
C. Effectiveness of controls
D. Audit-logging capabilities