Which of the following would provide the BEST justification for a new information security investment?

A. Defined key performance indicators (KPIs)
B. Projected reduction in risk
C. Results of a comprehensive threat analysis
D. Senior management involvement in project prioritization