What is the BEST information to present to business control owners when justifying costs related to controls?

A. Return on IT security-related investments
B. The previous year’s budget and actuals
C. Industry benchmarks and standards
D. Loss event frequency and magnitude