Risk management strategies are PRIMARILY adopted to:

A. achieve compliance with legal requirements
B. take necessary precautions for claims and losses
C. avoid risk for business and IT assets
D. achieve acceptable residual risk levels