Which statement BEST describes the role of IT staff in risk management?

IT staff have a perspective of potential risks in their work, and are responsible for contributing to the effective management of risks

When IT services fail because of unidentified risk, responsible staff must be held accountable

IT staff cannot be relied on to objectively identify potential risks in their work

IT risk management is a specialized skill and should be performed only by specially trained staff