Conflicting objectives are MOST likely to compromise the effectiveness of the information security process when information security management is: 

Answer options:

A. reporting to the network infrastructure manager.
B. outside of information technology.
C. partially staffed by external security consultants.
D. combined with the change management function.

D