Which of the following statements is true regarding aligning risks?

	a.	There is currently no framework available for aligning risks, threats, and vulnerabilities to risk management controls.
	b.	Organizations should not attempt to align risks, threats, and vulnerabilities to risk management controls.
	c.	Conveying IT risks in terms of business risks and translating business goals into IT goals can be challenging.
	d.	The worlds of business and IT inherently align.