Which of the following has the GREATEST impact on the design of an IT governance framework?

IT performance metrics are used to measure the effectiveness of IT governance and operations, but they are an output or a component within the framework, not the primary driver for its initial design.

Resource allocation is a critical function managed by the IT governance framework to achieve business objectives, but the design of the framework itself is primarily influenced by the need to mitigate risks and ensure strategic alignment.

Business leadership defines the overall strategic direction and objectives, which the IT governance framework then supports. While leadership is crucial for setting context, business risk provides the specific challenges and constraints that directly shape the governance structure to protect those objectives.

Business risk has the greatest impact on the design of an IT governance framework because the core purpose of IT governance is to ensure IT supports business objectives while effectively managing associated risks. The framework is designed to establish controls, policies, and decision-making processes that mitigate threats to the business, making risk management a foundational element that dictates the structure and priorities of governance.