Which of the following is the MOST important reason to document information security incidents that are reported across the organization?

A. Prevent incident recurrence.
B. Support business investments in security.
C. Identify unmitigated risk.
D. Evaluate the security posture of the organization.