Which of the following is MOST important for an IS auditor to consider during a review of the IT governance of an organization?

A. Funding allocations
B. Risk management methodology
C. Defined service levels
D. Decision making responsibilities