Answer (C) is correct. “Adequacy of risk management, control, and governance processes is present if management has planned and designed them in a manner that provides reasonable assurance that the organization’s objectives and goals will be achieved efficiently and economically. Efficient performance accomplishes objectives and goals in an accurate, timely, and economical fashion. Economical performance accomplishes objectives and cost) commensurate with the risk exposure. Reasonable assurance is provided if the most cost-effective measures are taken in the design and implementation stages to reduce risks and restrict expected deviations to a tolerable level. Thus, the design process begins with the establishment of objectives and goals. This is followed by connecting or interrelating concepts, parts, activities, and people in such a manner as to operate together to achieve the established objectives and goals” (PA 2100-1).