Why would you use the GRC SMF?

A.
to assess, monitor and control risk

B.
to maintain configuration baselines

C.
to manage change

D.
to understand accountabilities