Which of the Following Represents the BEST Method for Obtaining

Which of the following represents the BEST method for obtaining business unit acceptance of security controls within an organization?

A) Allow the business units to decide which controls apply to their systems, such as the encryption of sensitive data
B) Create separate controls for the business units based on the types of business and functions they perform
C) Ensure business units are involved in the creation of controls and defining conditions under which they must be applied
D) Provide the business units with control mandates and schedules of audits for compliance validation