Which of the following roles would provide the MOST important input when identifying IT risk scenarios?

A. Operational risk managers
B. Internal auditors
C. Information security managers
D. Business process owners