An organization involved in e-commerce activities operating from its home country opened a new office in another country with stringent security laws. In this scenario, the overall security strategy should be based on:

A. risk assessment results.
B. international security standards.
C. the most stringent requirements.
D. the security organization structure.