What is the primary focus of a Risk and Control Self-Assessment (RCSA)?
A. To assess the performance of IT staff
B. To understand an organization's risks and their potential effects on the business
C. To calculate the annual IT budget
D. To determine the number of employees needed in the IT department
FUD
