Which of the following would be MOST important to include in a business case to help obtain senior management’s commitment for an information security investment?

A. Results of an independent audit
B. Industry best practices
C. Projected business value
D. Reference to business polices