Who is MOST likely to be responsible for the coordination between the IT risk strategy and the business risk strategy?

A. Information security director
B. Internal audit director
C. Chief information officer
D. Chief financial officer