In information security governance, the PRIMARY role of the board of directors is to ensure:

A. approval of relevant policies and standards.
B. communication of security posture to stakeholders.
C. compliance with regulations and best practices.
D. alignment with the strategic goals of the organization.