A risk profile support effective security decisions PRIMARILY because it:

A. defines how the best mitigate future risks.
B. identifies priorities for risk reduction.
C. enables comparison with industry best practices.
D. describes security threats.