Your organization is implementing a security control framework to formalize its cybersecurity strategy. After considering multiple options, the CSO recommended COBIT because prospective clients in your industry value COBIT certifications. What principle is this decision based on$?$ Choose the best response.

a$.$

Downstream liability

b$.$

Regulatory compliance

c$.$

Risk management framework

d$.$

Security attestation