Which of the following is the MOST important driver when developing an effective information security strategy?

A. Security audit reports
B. Benchmarking reports
C. Information security standards
D. Compliance requirements