Management is questioning the need for several items in the information security budget proposal. Which of the following would have been MOST helpful prior to budget submission?

A. Benchmarking information security efforts of industry competitors
B. Obtaining better pricing from information security service vendors
C. Presenting a report of current threats to the organization
D. Educating management on information security best practices