Which of the following is the BEST approach to make strategic information security decisions?

A. Establish an information security steering committee.
B. Establish periodic senior management meetings.
C. Establish regular information security status reporting.
D. Establish business unit security working groups.