An organization's business gap analysis reveals the need for a robust IT risk strategy. Which of the following should be the risk practitioner's PRIMARY consideration when participating in development of the new strategy? Proposed risk budget Scale of technology Risk culture Risk indicators