Which of the following is the BEST way to implement effective IT risk management?

A. Minimize the number of IT risk management decision points.
B. Adopt risk management processes.
C. Establish a risk management function.
D. Align with business risk management processes.