When preparing a business case for the implementation of a security information and event management (SIEM) system, which of the following should be a PRIMARY driver in the feasibility study?

A. Cost of software
B. Cost-benefit analysis
C. Implementation timeframe
D. Industry benchmarks