Which of the following tools BEST demonstrates the effectiveness of the information security program?

A. Key risk indicators (KRIs)
B. Management satisfaction surveys
C. Risk heat map
D. A security balanced scorecard