Which of the following is the GREATEST advantage of implementing a risk management program? 

Answer options:

A. Promoting a risk-aware culture
B. Improving security governance
C. Enabling risk-aware decisions
D. Reducing residual risk

A