When developing an information security strategy, the MOST important requirement is that:

A. standards capture the intent of management.
B. a schedule is developed to achieve objectives.
C. the desired outcome is known.
D. critical success factors (CSFs) are developed.