Which of the following should be the PRIMARY goal of information security?

Information security's ultimate purpose is to support and enable the business functions and objectives by protecting its information assets, rather than existing as an isolated function. Security measures must align with business needs to be effective and relevant.

Regulatory compliance is a critical requirement but is a means to an end, often driven by business needs, not the overarching primary goal itself.

Data governance is a component of information management and security, focusing on data policies and controls, but not the primary goal of the entire information security program.

Information management is a broader discipline that encompasses how information is acquired, organized, stored, and retrieved; information security is a crucial part of it, but not the primary goal of security itself.