In a large organization, defining recovery time objectives (RTOs) is PRIMARILY the responsibility of:

A. the IT manager.
B. the information security manager.
C. the business unit manager.
D. senior manager.