What is the correct approach for addressing security and organization objectives?

What is the correct approach for addressing security and organization objectives?

a. Security and organization objectives should be developed separately.

b. Security should drive organization objectives.

c. Security should support organization objectives.

d. The site security officer should approve or reject organization

objectives.