Information security governance is PRIMARILY driven by: 

Answer options:

A. technology constraints.
B. regulatory requirements.
C. litigation potential.
D. business strategy.

D

Governance is directly tied to the strategy and direction of the business. Technology constraints, regulatory requirements and litigation potential are all important factors, but they are necessarily in line with the business strategy.