Which of the following if the MOST significant advantage of developing a well-defined information security strategy?

A. Support for buy-in from organizational employees
B. Allocation of resources to highest priorities
C. Prevention of deviations from risk tolerance thresholds
D. Increased maturity of incident response processes