What Would Senior Management's Role Be in Relation to the Question

Multiple Choice

What would senior management's role be in relation to the question "What security and privacy risks will we accept?"

A) Decide which IT capabilities should be provided centrally and which should be developed by individual businesses
B) Lead the decision making on the trade-offs between security and privacy on one hand and convenience on the other
C) Decide which features are needed on the basis of their costs and benefits
D) Assign a business executive to be accountable for every IT project, and monitor business metrics