Which of the following provides the MOST relevant information to determine the overall effectiveness of an information security program and underlying business processes?
A . Balanced scorecard
B . Cost-benefit analysis
C . Industry benchmarks
D . SWOT analysis
Answer: A