Which of the following BEST indicates ongoing senior management commitment to the organization's information security strategy?

An efficient incident response program is a positive outcome of good security practices, but it doesn't solely indicate ongoing senior management commitment as much as consistent funding does.

Established Key Performance Indicators (KPIs) help measure program effectiveness, but merely establishing them doesn't prove ongoing commitment without the necessary resources to achieve them.

A comprehensive security awareness training program is a vital component of security, but it's a single aspect that relies on initial and ongoing funding, rather than being the ultimate indicator of overall commitment.

Adequate funding for the information security program unequivocally demonstrates senior management's ongoing commitment, as it represents a tangible allocation of resources. This financial investment enables the acquisition of necessary technologies, hiring of skilled personnel, and implementation of critical security initiatives, directly supporting the organization's security strategy over time.