The MOST important characteristic of an organization’s policies is to reflect the organization’s:

A. risk appetite
B. capabilities
C. asset value.
D. risk assessment methodology.