Which statement best characterizes the difference between a business case and a business plan for an information security project?

The business case looks at law and regulations as the source of detailed requirements, while the business plan uses broad, general statements about goals and objectives as the basis of its plan.

The business case looks at longer$-$term, strategic ways to accomplish objectives; the business plan specifies the details about each element in achieving that plan.

The business case provides a compelling argument, in cost$-$benefits or risks$-$versus$-$rewards terms, for making an immediate or near$-$term change in security practices; the business plan looks at longer$-$term objectives, prioritizes them, and lays out a strategy to achieve them with.