The use of a business case to obtain funding for an information security investment is MOST effective when the business case:

A. relates information security policies and standards into business requirements
B. relates the investment to the organization’s strategic plan.
C. realigns information security objectives to organizational strategy.
D. articulates management’s intent and information security directives in clear language.