Which of the following would BEST support an enterprise's initiative to incorporate desired organizational behaviors into the IT governance framework?

An enterprise code of ethics establishes the fundamental moral principles and behavioral expectations for all employees, serving as the most effective tool to proactively guide and incorporate desired organizational behaviors into the IT governance framework.

Risk mitigation strategies focus on managing threats, not primarily on shaping organizational behaviors.

Documented consequences for noncompliance are reactive measures, enforcing behaviors rather not proactively fostering desired ones.

An enterprise RACI matrix defines roles and responsibilities, which supports structure but doesn't inherently instill desired behaviors.