The MOST important element in achieving executive commitment to an information security governance program is:

A. a defined security framework
B. identified business drivers
C. established security strategies
D. a process improvement model