To ensure IT risk is managed in a consistent manner, it is MOST important for IT governance to establish a:

A. risk management reporting tool to ensure compliance.
B. balanced scorecard that includes IT risks.
C. risk management committee to identify IT-related risks.
D. risk management framework.