Which of the following would provide the MOST essential input for the development of an information security strategy?

A. Measurement of security performance against IT goals
B. Results of an information security gap analysis
C. Availability of capable information security resources
D. Results of a technology risk assessment