Which of the following is the MOST important step in the development of an effective IT governance action plan?

A. Conducting a business impact analysis
B. Preparing a statement of sensitivity
C. Setting up an IT governance framework for the process
D. Measuring IT governance key performance indicators (KPIs)