As part of an overall IT risk management plan, an IT risk register BEST helps management:

A. stay current with existing control status
B. align IT processes with business objectives
C. understand the organizational risk profile
D. communicate the enterprise risk management policy