To address the issue that performance pressures on IT may conflict with information security controls, it is MOST important that:

A. noncompliance issues are reported to senior management

B. information security management understands business performance issues

C. the security policy is changed to accommodate IT performance pressure

D. senior management provides guidance and dispute resolution