Which of the following is the PRIMARY advantage of having an established information security governance framework in place when an organization is adopting emerging technologies? 

Answer options:

A. An emerging technologies strategy would be in place
B. A cost-benefit analysis process would be easier to perform
C. An effective security risk management process is established
D. End-user acceptance of emerging technologies has been established

C