The MOST important objective of monitoring key risk indicators (KRIs) related to information security is to:

A. identify change in security exposures.
B. reduce risk management costs.
C. meet regulatory compliance requirements.
D. minimize the loss from security incidents.