An information security manager’s PRIMARY objective for presenting key risks to the board of directors is to:

A. meet information security compliance requirements.
B. ensure appropriate information security governance.
C. quantity reputational risks.
D. re-evaluate the risk appetite.