Which of the following is the MOST important reason to monitor information risk on a continuous basis?

A. The risk profile can change over time.
B. The effectiveness of controls can be verified.
C. The cost of controls can be minimized.
D. Risk assessment errors can be identified.