Which of the following would provide the MOST comprehensive view of the effectiveness of the information security function within an organization?
A . An incident reporting system
B . Examples of compliance with security processes
C . A balanced scorecard
D . An interview with senior managers
Answer: A