Which of the following is MOST important to communicate to senior management during the initial implementation of a risk management program?

A. Risk ownership
B. Best practices
C. Desired risk level
D. Regulatory compliance