Which of the following is the MOST effective way of ensuring that business units comply with an information security governance framework?

A. Integrating security requirements with processes
B. Performing security assessments and gap analysis
C. Conducting a business impact analysis (BIA)
D. Conducting information security awareness training