Which of the following is MOST important for an information security manager to consider when identifying information security resource requirements?

A. Information security incidents
B. Information security strategy
C. Current resourcing levels
D. Availability of potential resources