When Would It Be More Desirable to Develop a Set

When would it be more desirable to develop a set of decentralized security policies and procedures within an enterprise environment?

A) When there is a variety of technologies deployed in the infrastructure.
B) When it results in an overall lower cost of operating the security program.
C) When there is a need to develop a more unified incident response capability.
D) When the enterprise is made up of many business units with diverse business activities, risks profiles and regulatory requirements.