Which of the following is MOST important for an IS auditor to understand when planning an IS audit?

A. Inherent risk of auditable areas
B. Management focus on particular operations
C. Number of high-risk auditable processes
D. Availability of IS audit resources