The MOST important element in achieving executive commitment to an information security governance program is: