An information security manager is developing a new information security strategy. Which of the following functions would serve as the BEST resource to review the strategy and provide guidance for business alignment?

A. Internal audit
B. The steering committee
C. The legal department
D. The board of directors