Which of the following is the MOST important consideration for an IS auditor when assessing the adequacy of an organization's information security policy?

Which of the following is the MOST important consideration for an IS auditor when assessing the adequacy of an organization’s information security policy?

Which of the following is the MOST important consideration for an IS auditor when assessing the adequacy of an organization’s information security policy?
A . Alignment with the IT tactical plan
B. IT steering committee minutes
C. Compliance with industry best practice
D. Business objectives

Answer: D