Which of the following contributes MOST to the effective implementation of an information security strategy?

A. Reporting of security metrics
B. Regular security awareness training
C. Endorsement by senior management
D. Implementation of security standards