Which of the following provides the BEST measurement of an organization’s risk management maturity level?

A. IT alignment to business objectives
B. Level of residual risk
C. Key risk indicators (KRIs)
D. The results of a gap analysis