To develop meaningful recommendations for findings, which of the following is MOST important for an IS auditor to determine and understand?

A. Criteria
B. Responsible party
C. Impact
D. Root cause