Which is MOST important to identify when developing an effective information security strategy? 

Answer options:

A. Business assets to be secured
B. Potential savings resulting from security governance
C. Compliance requirements
D. Control gaps that require remediation

A