An IS auditor has been asked to advise on the design and implementation of IT management best practices. Which of the following actions would impair the auditor’s independence?

A. Providing consulting advice for managing applications
B. Designing an embedded audit module
C. Implementing risk response on management’s behalf
D. Evaluating the risk management process