The purpose of the Policy and Control MR is to provide IT management with an understanding of
what?

A.
How risks to achieving goals are being addressed.

B.
A prediction of the burden of control so that it can adjust appropriately for desired benefits
during the operational stage.

C.
An evaluation of external policy mandates as given by the Service Level Manager.

D.
Whether control environment is legal.