Management should include complementary user entity controls $($CUECs$)$ in its system description toA. Describe the controls necessary to achieve the service organization's objectives.B$.$ Identify deviations in the operating effectiveness of complementary controls.C$.$ Provide suitable criteria from which user entities should design controls.D$.$ Transfer the responsibility for control design deficiencies to user entities.