Which of the following best describes the underlying premise of the COSO enterprise risk management framework?

A. Management should set objectives before assessing risk.

B. Every entity exists to provide value for its stakeholders.

C. Policies are established to ensure that risk responses are performed effectively.
D. Enterprise risk management can minimize the impact and likelihood of unanticipated events.