Which of the following is the BEST way for an external IS auditor to determine the scope of an audit for a large multinational organization?

A. Focus on areas related to the use of emerging technologies.
B. Sample audit each geographical location.
C. Focus on identified high-risk areas in the organization.
D. Use the work of the internal auditor at each location.