Which of the following is the BEST approach to make strategic information security decisions? 

Answer options:

A. Establish an information security steering committee.
B. Establish periodic senior management meetings.
C. Establish regular information security status reporting.
D. Establish business unit security working groups.

D