Which of the following would be MOST useful to help senior management understand the status of information security compliance?

A. Industry benchmarks
B. Risk assessment results
C. Business impact analysis (BIA) results
D. Key performance indicators (KPIs)