Which of the following is the BEST way to align security and business strategies?

A. Include security risk as part of corporate risk management.
B. Develop a balanced scorecard for security.
C. Establish key performance indicators (KPIs) for business through security processes.
D. Integrate information security governance into corporate governance.