Which of the following is the BEST guidance from an IS auditor to an organization planning an initiative to improve the effectiveness of its IT processes?

A. IT staff should be surveyed to identify current IT process weaknesses and suggest improvements.
B. The organization should use a capability maturity model to identify current maturity levels for each IT process.
C. IT management should include process improvements in staff performance
D. The organization should refer to prior audit reports to identify the specific IT processes to be improved.