What is the purpose of the 'information security management' practice?


A. To protect the information needed by the organization to conduct its business
B. To observe services and service components
C. To ensure that accurate and reliable information about the configuration of services is available when and where it is
needed
D. To plan and manage the full lifecycle of all IT assets