Which of the following is the BEST option for addressing regulations that will adversely affect the allocation of information security program resources?

A. Prioritize compliance efforts based on probability.
B. Determine compliance levels of peer organizations.
C. Delay implementation of compliance activities.
D. Conduct assessments for management decisions