A new agile coach wants the team to raise risks openly. Which first step is most effective?

1. ARequire every risk to be approved by the sponsor before discussion
2. BPublish a list of the risks each member failed to report last release
3. CMake risk reporting part of each member's annual performance goals
4. DRespond with curiosity, not criticism, the first time someone raises one