Which of the following would provide the MOST essential input for the development of an information security strategy?
A . Measurement of security performance against IT goals
B . Results of an information security gap analysis
C . Availability of capable information security resources
D . Results of a technology risk assessment
Answer: B