Which of the following is the PRIMARY benefit of implementing a maturity model for information security management?

A. Information security management costs will be optimized.
B. Information security strategy will be in line with industry best practice.
C. Gaps between current and desirable levels will be addressed.
D. Staff awareness of information security compliance will be promoted.