Which of the following will BEST ensure that controls adequately support business goals and objectives?

The risk management process integrates the identification, assessment, and treatment of risks directly with an organization's strategic goals and objectives. By systematically analyzing risks to critical business assets and processes, it ensures that controls are implemented purposefully to protect what matters most for achieving desired business outcomes, thereby aligning security with strategy.

Enforcing strict disciplinary procedures addresses compliance with *existing* controls but does not guarantee that those controls are inherently aligned with business goals.

Reviewing external audit results provides an after-the-fact assessment of control effectiveness and compliance, but it doesn't proactively ensure alignment with business goals from the outset.

Adopting internationally accepted controls provides a strong baseline, but these controls still need to be tailored and prioritized through a risk management process to specifically support an organization's unique business goals.