Which of the following is the MOST important factor to ensure information security is meeting the organization’s objectives?

A. Internal audit’s involvement in the security process
B. Implementation of a control self-assessment process
C. Establishment of acceptable risk thresholds
D. Implementation of a security awareness program