To address the issue that performance pressures on IT may conflict with information security controls, it is MOST important that:

A. the security policy is changed to accommodate IT performance pressure
B. noncompliance issues are reported senior management
C. senior management provides guidance and dispute resolution
D. information security management understands business performance issues