What information is MOST helpful in demonstrating to senior management how information security governance aligns with business objectives?

A. Updates on information security projects in development
B. Drafts of proposed policy changes
C. Metrics of key information security deliverables
D. A list of monitored threats, risks, and exposures