The BEST way to obtain funding from senior management for a security awareness program is to:

A. meet regulatory requirements.
B. produce an impact analysis report of potential breaches.
C. produce a report of organizational risks.
D. demonstrate that the program will adequately reduce risk