⟩ In a risk-based audit approach, an IS auditor, in addition to risk, would be influenced by
1. the availability of CAATs.
2. management's representation.
3. organizational structure and job responsibilities.
4. the existence of internal and operational controls
Answer: D