An organization recently implemented an industry-recognized IT framework to improve the overall effectiveness of IT governance. Which of the following would BEST enable an IS auditor to access the implementation against the framework?

A. Capability maturity model
B. Key risk indicators (KRIs)
C. Industry benchmarking
D. Balanced scorecard