Which of the following is MOST important to providing trust in operations, confidence in the achievement of enterprise objectives, and an adequate understanding of residual risk?

A. A managed system of internal controls
B. A continuity of operations response plan
C. A risk management framework