A CIO has asked an IS auditor to implement several security controls for an organization’s IT processes and systems. The auditor should:

A. perform the assignment and future audits with due professional care.
B. obtain approval from executive management for the implementation.
C. refuse due to independence issues.
D. communicate the conflict of interest to audit management.