Due to cloud audit team resource constraints, an audit plan as initially approved cannot be completed. Assuming that the situation is communicated in the cloud audit report which course of action is MOST relevant?
A. Focusing on auditing high-risk areas
B. Testing the adequacy of cloud controls design
C. Relying on management testing of cloud controls
D. Testing the operational effectiveness of cloud controls
Reference: https://www.ucop.edu/ethics-compliance-audit-services/_files/webinars/10-14-16-cloud-computing/cloudcomputing.pdf (31)