Which of the following BEST ensures that information security aligns with business objectives and is supported at the highest level of the organization?
A. Establishing detailed technical standards for system hardening
B. Implementing security awareness training across the organization
C. Obtaining executive sponsorship for the information security program
D. Conducting regular penetration testing of critical systems