Which of the following is the PRIMARY purpose of establishing an information security governance framework?

A. To minimize security risks
B. To proactively address security objectives
C. To reduce security audit issues
D. To enhance business continuity planning