Which of the following serves as an effective communications channel and provides an ongoing basis for ensuring the alignment of the security program with business objectives?
a. Security Awareness Training
b. Security Metrics and Reporting
c. Incident Response Team
d. Security Policy