An IS auditor has performed an agreed-upon procedures engagement for the organization’s IT steering committee. Which of the following would be the MOST important element to include in the report?

A. Complementary user entity controls
B. Management’s representation on the effectiveness of controls
C. Statement that the engagement followed standards
D. An opinion on the effectiveness of controls