IS audits should be selected through a risk analysis process to concentrate on:

A.
those areas of greatest risk and opportunity for improvements.

B.
those areas of least risk and opportunity for improvements.

C.
those areas of the greatest financial value.

D.
areas led by the key people of the organization.

E.
random events.

F.
irregular events.

Explanation:
Audits are typically selected through a risk analysis process to concentrate on those areas of greatest risk and
opportunity for improvements.
Audit topics are supposed to be chosen based on potential for cost savings and service improvements.