Which of the following is the PRIMARY objective of providing an aggregated view of IT risk to business management?
A . To provide consistent and clear terminology
B . To allow for proper review of risk tolerance
C . To identify dependencies for reporting risk
D . To enable consistent data on risk to be obtained
Answer: B