Which of the following is the PRIMARY benefit of including IT management and staff when conducting control self-assessments (CSAs) within an organization?

A. It helps to identify risk to the business.
B. It improves the efficiency of business and IT operational processes.
C. It increases buy-in for more stringent controls.
D. It reduces the workload of external and internal auditors.