A risk analysis for a new system is being performed. For which of the following is business knowledge MORE important than IT knowledge?

A. Vulnerability analysis
B. Balanced scorecard
C. Cost-benefit analysis
D. Impact analysis