Which of the following is the BEST example of weak management commitment to the protection of
security assets and resources?

A.
poor governance over security processes and procedures

B.
immature security controls and procedures

C.
variances against regulatory requirements

D.
unanticipated increases in security incidents and threats