When deciding to develop a system with sensitive data, which of the following is MOST important to include in a business case?

A. A risk assessment to determine the appropriate controls
B. Updated enterprise architecture (EA)
C. The additional cost of encrypting sensitive data
D. Skills gap analysis