An enterprise is assessing whether to utilize wearable technology. The enterprise has no prior experience with this technology and has asked the chief technology officer (CTO) to assess the impact to the enterprise. The CTO should FIRST:

A. prioritize wearable technology risk.
B. understand the enterprise's risk tolerance.
C. map the business goals to IT risk processes.
D. create an IT risk scorecard.