Which of the following is MOST important to the successful development of an information security strategy?

A. A well-implemented governance framework
B. Current state and desired objectives
C. An implemented development life cycle process
D. Approved policies and standards