The Chief Information Security Officer (CISO) has asked the security staff to identify a framework on which to base the security program. The CISO would like to achieve a certification show

ing the security program meets all required best practices. Which of the following would be the BEST choice?

A. OSSIM

B. SDLC

C. SANS

D. ISO