Which of the following is the MOST important success factor when developing an information security strategy?

Adequate funding is crucial, but it is typically a consequence of gaining board and executive approval, making the approval itself the more fundamental factor.

Alignment with a security control framework is a best practice for strategy design, but securing executive approval is more critical for successful implementation and sustained support.

Basing the strategy on proven technologies and trends contributes to its technical soundness but doesn't guarantee organizational adoption or resource allocation without executive approval.

Approval by the board and executive management is the MOST important success factor because it ensures that the security strategy has the necessary top-down mandate, financial backing, and organizational priority. Without this executive buy-in, even a well-designed strategy will struggle to secure resources, gain organizational acceptance, and be effectively implemented.