Which of the following is the MOST important reason for an organization to develop an information security governance program?

A. Establishment of accountability
B. Compliance with audit requirements
C. Monitoring of security incidents
D. Creation of tactical solutions