Which of the following would be the MOST effective method to identify high risk areas in the business to be included in the audit plan?

A. Validate current risk from prior internal audit findings.
B. Review industry reports to identify common risk areas.
C. Engage with management to understand the business.
D. Review external audit reports of the business.