Information systems auditors help the organization:

A.
Mitigate compliance issues

B.
Establish an eff ective control environment

C.
Identify control gaps

D.
Address information technology for fi nancial statements

Explanation:
C: Auditors provide an essential role for maintaining and improving information security. They provide an independent view of the design, effectiveness, and implementation of controls. The results of audits generate findings that require management response and corrective action plans to resolve the issue and mitigate the risk. Page 448.