Which of the following key risk indicators (KRIs) is MOST effective for monitoring risk related to a bring your own device (BYOD) program?

A. Number of incidents originating from BYOD devices
B. Budget allocated to the BYOD program security controls
C. Number of devices enrolled in the BYOD program
D. Number of users who have signed a BYOD acceptable use policy