Which of the following would provide the MOST comprehensive view of the effectiveness of the information security function within an organization?

A. An incident reporting system
B. Examples of compliance with security processes
C. A balanced scorecard
D. An interview with senior managers