Reviewing security objectives and ensuring the integration of security across business units is PRIMARILY the focus of the:

A. executive management
B. chief information security officer (CISO)
C. board of directors
D. steering committee.