Which of the following BEST supports the alignment of information security with business functions?

A. Creation of a security steering committee
B. IT management support of security assessments
C. Business management participation in security penetration tests
D. A focus on technology security risk within business processes