Which of the following is the MOST important reason for selecting IT key risk indicators (KRIs)?

A. Enabling comparison against similar IT KRIs
B. Increasing the probability of achieving IT goals
C. Assessing the current IT controls model
D. Demonstrating the effectiveness of IT risk policies