Which one of the following statements is correct regarding the use of risk criteria in the risk management process? Available answer options Select only one option A The risk criteria can only be used to identify traditional hazard risks. B The risk criteria is developed by senior management based on their risk appetite. C The risk criteria should be aligned with the organization's objectives, resources, and risk management policy. D The risk criteria should be used to review the organization's internal environment, rather than the external environment