The BEST way to report to the board on the effectiveness of the information security program is to present:

A. a dashboard illustrating key performance metrics.
B. peer-group industry benchmarks.
C. a summary of the most recent audit findings.
D. a report of cost savings from process improvements.