Which of the following would be the BEST way for a CIO to enhance security risk management alignment between IT and business?

A. Facilitate joint workshops for IT and the business on risk assessment techniques.
B. Analyze benchmark reports to understand the organization's security investments against competitors.
C. Establish a process in which IT and the business collaborate on risk assessment and mitigation prioritization.
D. Perform a trend analysis based on security investment levels and business initiatives.