Business units within an organization are resistant to proposed changes to the information security program.
Which of the following is the BEST way to address this issue?
A . Implementing additional security awareness training
B . Communicating critical risk assessment results to business unit managers
C . Including business unit representation on the security steering committee
D . Publishing updated information security policies
Answer: B