The BEST way to evaluate a shared control environment is to obtain an assurance report and review which of the following?

A. Control self-assessment (CSA)
B. Service level agreement (SLA)
C. Master service agreement
D. Complementary user entity controls