What role does top management play in continual improvement?

• A.Approving the security budget, signing the policy, and delegating the review of improvement outcomes to the internal audit function
• B.Signing the policies each year, and leaving improvement decisions to the ISMS manager
• C.Providing direction, resources, and support for improvement initiatives, and reviewing improvement outcomes
• D.Approving the budget, and stepping back from improvement until the certificate is renewed