In determining whether the IA department is adequately resourced, what is likely to be a persuasive factor: A trend analysis of IA's budget as a percent of total Revenue. An analysis of audits on the annual plan not being completed due to insufficient resources. An externally-produced benchmark study. An enterprise risk assessment identifying heightened compliance, security or business continuity risks. All of the above