Which of the following is the MOST important driver when developing an effective information security strategy?

A. Information security standards
B. Compliance requirements
C. Benchmarking reports
D. Security audit reports