Which of the following is a PRIMARY responsibility of an information security governance committee? 

Answer options:

A. Analyzing information security policy compliance reviews
B. Approving the purchase of information security technologies
C. Reviewing the information security strategy
D. Approving the information security awareness training strategy

C