B. senior business management.
Senior management cannot delegate their accountability for management of risk. They have the ultimate or final responsibility for the effective and efficient operation of the organization. Choices A, C and D should act as advisors to senior management in determining an acceptable risk level.