What is the core objective of an information security program? $($D$1,$ L$1\mathrm{.}1)$

To support the mission of the business

To dictate what the business does and how to do it securely$.$

To identify employees who fail to take proper security precautions for retraining or admonishment.

To demonstrate that the organization is compliant with security requirements in law, regulation or contracts.