Which of the following risk activities is BEST facilitated by enterprise architecture (EA)?

Enterprise architecture provides a holistic view of an organization's business processes, information systems, and technology infrastructure, mapping how different components interact. This comprehensive understanding allows EA to bridge the gap between specific business unit risks and the organization's strategic objectives, ensuring that risk responses across various units contribute to overall organizational priorities and resilience.

While EA provides context, determining attack likelihood is typically a more granular security analysis or threat modeling activity, not primarily facilitated by EA.

Adjusting business unit risk tolerances is a decision-making process involving leadership and risk committees, not a direct facilitation by EA, though EA can inform these discussions.

Customizing incident response plans for each business unit is an operational task often done by security teams, utilizing EA documentation but not directly facilitated by EA itself.