Which of the following BEST enables an organization to determine whether risk management is aligned with its goals and objectives?

Approved policies define boundaries but do not inherently ensure alignment of risk management with strategic goals; they are a component of governance.

While managing risk appetite is crucial, the mere existence of controls doesn't guarantee alignment with broader organizational goals without a strategic framework like EA.

Continually evaluating environmental changes is part of ongoing risk management but does not, by itself, provide the strategic framework to align risk management with overall goals and objectives.

An approved enterprise architecture (EA) program provides a comprehensive framework that describes the current and future state of an organization's business processes, information systems, and technology infrastructure. By integrating risk management into the EA, an organization can ensure that risk considerations are built into the design and evolution of the enterprise, directly aligning risk management efforts with strategic goals and objectives. EA ensures that risk decisions support the overall strategic direction rather than being reactive or isolated.