Which of the following is the PRIMARY advantage of having an established information security governance framework in place when an organization is adopting emerging technologies?
A . An emerging technologies strategy would be in place
B . A cost-benefit analysis process would be easier to perform
C . An effective security risk management process is established
D . End-user acceptance of emerging technologies has been established
Answer: C