A control environment is defined as:
A. An inventory of the security policy controls
B. A well-defined framework to track control exceptions
C. A term describing the overall way in which the organization's controls are governed and executed
D. None of the above