An enterprise is planning a change in business direction. As a result, IT risk will significantly increase. Which of the following should be the GO'S FIRST course of action?

Recommending delaying the business change is an overreach of the GO's role, which is to inform management, not dictate business strategy.

Implementing IT changes is premature before executive management has acknowledged and provided direction on the identified significant risks.

Reporting significant IT risk to executive management is crucial as it enables them to make informed strategic decisions, understand the potential impact on business objectives, and allocate resources for risk mitigation or acceptance. Executive awareness ensures the business change proceeds with full understanding of its associated IT risk profile and allows for top-level guidance on how to proceed.

Planning for IT reorganization is a consequence or mitigation action, not the immediate first step in addressing a newly identified significant risk from a business change.