Which of the following factors will BEST promote effective information security management?

A. Senior management commitment
B. Identification and risk assessment of sensitive resources
C. Security awareness training
D. Security policy framework