The independence of an IS auditor auditing an application is maintained if the auditor’s role is limited to:

A. creating system specifications.
B. defining user requirements.
C. recommending system enhancements.
D. designing access control rules.