When establishing a comprehensive approach for analyzing IT risk in an international, multi-division enterprise, it is MOST important to ensure:

A. IT senior managers perform the analysis.
B. risk management methodologies are aligned with local best practices.
C. a consistent risk management methodology is used.
D. risk scenarios are compartmentalized by division.