Which of the following is the MOST effective approach to ensure senior management sponsorship of IT risk management?

Benchmarking risk frameworks against best practices is a good internal improvement step but doesn't inherently guarantee senior management sponsorship.

Calculating financial impact for individual findings is valuable for prioritization but may not, by itself, secure holistic sponsorship for the entire IT risk management program.

Periodically reviewing the IT risk register is an operational activity but doesn't necessarily ensure continuous senior management sponsorship, especially if the risks are not tied to broader enterprise objectives.

Integrating IT risk into the overarching enterprise risk management (ERM) framework ensures that IT risks are viewed within the context of overall business objectives and priorities, naturally garnering senior management's attention and sponsorship.