Which of the following is MOST helpful in aligning IT risk with business objectives?

A. Performing a business impact analysis (BIA)
B. Integrating the results of top-down risk scenario analyses
C. Introducing an approved IT governance framework
D. Implementing a risk classification system