Which of the following is the MOST effective way of assessing enterprise risk?

A. Business vulnerability assessment
B. Operational risk assessment
C. Business impact analysis (BIA)
D. Likelihood of threat analysis