An IT strategy committee wants to ensure that a risk program is successfully implemented throughout the enterprise. Which of the following would BEST support this goal?

A. Commitment from senior management
B. Mandatory risk awareness courses for staff
C. A risk management framework
D. A risk recognition and reporting policy