Which of the following is the MAIN reason for documenting the performance of controls?

A. Justifying return on investment
B. Demonstrating effective risk mitigation
C. Providing accurate risk reporting
D. Obtaining management sign-off