Which of the following is the BEST course of action for an information security manager to align security and business goals?

A. Reviewing the business strategy
B. Actively engaging with stakeholders
C. Conducting a business impact analysis
D. Defining key performance indicators