Which of the following would provide the BEST justification for a new information security investment?

A. Results of a comprehensive threat analysis.
B. Projected reduction in risk.
C. Senior management involvement in project prioritization.
D. Defined key performance indicators (KPIs)