what needs to be protected by information security management?

Which of the following provides the PRIMARY source of guidance on what needs to be protected
by information security management?

A.
IT management

B.
Service desk manager

C.
Business management

D.
the change manager