Which of the following is MOST critical when designing controls?

A. Involvement of process owner
B. Involvement of internal audit
C. Identification of key risk indicators
D. Quantitative impact of the risk