Which of the following BEST promotes stakeholder accountability in the management of information security risks?

A. Targeted security procedures
B. Establishment of information ownership
C. Establishment of security baselines
D. Regular reviews for noncompliance