Which of the following is the MOST important element when developing an information security strategy?

A. Identifying applicable laws and regulations
B. Identifying information assets
C. Determining the risk management methodology
D. Aligning security activities with organizational goals