When would it be more desirable to develop a set of decentralized security policies and procedures within an enterprise environment?

When would it be more desirable to develop a set of decentralized security policies and procedures within an enterprise environment?
A . When there is a need to develop a more unified incident response capability.
B . When the enterprise is made up of many business units with diverse business activities, risks profiles and regulatory requirements.
C . When there is a variety of technologies deployed in the infrastructure.
D . When it results in an overall lower cost of operating the security program.

Answer: B