Which of the following would provide the MOST important input during the planning phase for an audit on the implementation of a bring your own device (BYOD) program?

A. Policies including BYOD acceptable use statements
B. Results of a risk assessment
C. An inventory of personal devices to be connected to the corporate network
D. Findings from prior audits