The MAIN reason for continuous monitoring of a security strategy is to:

A. optimize resource allocation.
B. confirm benefits are being realized.
C. evaluate the implementation of the strategy.
D. allocate funds for information security