When creating a separate IT risk register for a large organization, which of the following is MOST important to consider with regard to the existing corporate risk 'register?

Leveraging business risk professionals is beneficial but is a resource consideration, not the *most important* structural consideration for the register's alignment.

Relying on generic IT risk scenarios would lead to a less accurate and tailored risk assessment for the specific organization and its context.

Describing IT risk in business terms is important for communication, but it is a *result* of using a common taxonomy and understanding, not the primary foundational element for alignment.

A common risk taxonomy ensures that IT risks are classified, described, and measured using the same framework and language as the corporate risk register, allowing for accurate aggregation, comparison, and reporting of IT risks within the broader organizational risk landscape.