It is MOST important for a risk practitioner to have an awareness of an organization’s processes in order to:

A. perform a business impact analysis
B. establish risk guidelines
C. understand control design
D. identify potential sources of risk