When establishing an effective security governance framework for an organization, which of the following is MOST essential to ensure alignment with business objectives and risk management strategies?
Information security policies
Password complexity standards
Annualized Rate of Occurrence (ARO) calculations
Recovery Point Objective (RPO) metrics