The MAIN goal of an information security strategic plan is to:

A.
develop a risk assessment plan.

B.
develop a data protection plan.

C.
protect information assets and resources.

D.
establish security governance.