A risk profile supports effective security decisions PRIMARILY because it:

A. defines how to best mitigate future risks.
B. identifies priorities for risk reduction.
C. enables comparison with industry best practices.
D. describes security threats.