Which of the following is MOST important to the successful promotion of good security management practices?

A.
Security metrics

B.
Security baselines

C.
Management support

D.
Periodic training

Explanation:

Without management support, all other efforts will be undermined. Metrics, baselines and training are all important, but they depend on management support for their success.