Which of the following is the MOST important characteristic of an effective risk management program?

A. Risk response plans are documented.
B. Key risk indicators are defined.
C. Risk ownership is assigned.
D. Controls are mapped to key risk scenarios.