Which of the following is the PRIMARY objective of reporting security metrics to stakeholders?

A. To identify key controls within the organization
B. To provide support for security audit activities
C. To communicate the effectiveness of the security program
D. To demonstrate alignment to the business strategy