Which of the following is MOST important for an auditor to consider when scoping for an IT general controls audit? 

Answer options:

A. Frequency of changes
B. Timing of changes
C. Types of changes
D. Number of changes

C