Which of the following is the MOST crucial for a successful audit plan?

A.
Defining the scope of the audit to be performed

B.
Identifying the security controls to be implemented

C.
Working with the system owner on new controls

D.
Acquiring evidence of systems that are not compliant