The use of a business case to obtain funding for an information security investment is MOST effective when the business case:

A. translates information security policies and standards into business requirements.
B. articulates management’s intent and information security directives in clear language.
C. relates the investment to the organization’s strategic plan.
D. realigns information security objectives to organizational strategy.