The MAIN purpose of having a documented risk profile is to:

A. enable well-informed decision making.
B. comply with external and internal requirements.
C. keep the risk register up-to-date.
D. prioritize investment projects.