Which of the following is the MOST important consideration when designing information security architecture?

A. Risk management parameters for the organization are defined.
B. The information security architecture is aligned with industry standards.
C. The level of security supported is based on business decisions.
D. The existing threat landscape is monitored.