IT management has asked for a consolidated view into the organization’s risk profile to enable project prioritization and resource allocation. Which of the following materials would be MOST helpful?

A. List of key risk indicators
B. Internal audit reports
C. IT risk register
D. List of approved projects