The PRIMARY purpose of aligning information security with corporate governance objectives is to:

A. build capabilities to improve security processes.
B. consistently manage significant areas of risk.
C. identify an organization’s tolerance for risk.
D. re-align roles and responsibilities.