In an information assurance program, why is risk management important?

A. ignoring risks and controls B. bypassing management approval C. identifying, assessing, treating, and monitoring risk D. disabling audit logs