问题如下：
Effective risk governance in an enterprise provides guidance on all of the following except:
选项：
A.unacceptable risks.
B.worst losses that may be tolerated.
C.specific methods to mitigate risk for each subsidiary in the enterprise.
解释：
C is correct.
Risk governance is not about specifying methods to mitigate risk at the business line level. Rather, it is about establishing an appropriate level of risk for the entire enterprise. Specifics of dealing with risk fall under risk management and the risk infrastructure framework.
C.specific methods to mitigate risk for each subsidiary in the enterprise.
有C这个说法么，包含在risk management framework的哪部分中？是"risk policies and processes"还是"risk monitoring, mitigation and management" 呢？谢谢
