The IS auditor’s PRIMARY role in control self-assessment (CSA) is to:

A. evaluate the controls.
B. facilitate the process.
C. identify weaknesses.
D. draw up an action plan.