A Security Architect Has Convened a Meeting to Discuss an Organization's

A security architect has convened a meeting to discuss an organization's key management policy. The organization has a reliable internal key management system, and some argue that it would be best to manage the cryptographic keys internally as opposed to using a solution from a third party. The company should use:

A) the current internal key management system.
B) a third-party key management system that will reduce operating costs.
C) risk benefits analysis results to make a determination.
D) a software solution including secure key escrow capabilities.