A technology service organization has recently acquired a new subsidiary. What should be the IS auditor’s NEXT course of action when considering the impact on the development of the IT audit plan?

A. Review the revised business impact analysis (BIA).
B. Proceed with the current audit plan.
C. Perform a risk assessment.
D. Include the new systems in the audit plan.