The PRIMARY purpose of IT control status reporting is to:

A. assist internal audit in evaluating and initiating remediation efforts.
B. ensure compliance with IT governance strategy.
C. facilitate the comparison of the current and desired states.
D. benchmark IT controls with industry standards.