An audit committee is reviewing an annual IT risk assessment. Which of the following is the BEST justification for the audits selected?

A. Likelihood of an IT process failure
B. Key IT general process controls
C. Applications impacted
D. Underlying business risks