What should be done to determine the appropriate level of audit coverage for an organization's IT environment?

A. determine the company's quarterly budget requirement.
B. define an effective assessment methodology.
C. calculate the company's yearly budget requirement.
D. define an effective system upgrade methodology.
E. define an effective network implementation methodology.