What would be an IS auditor`s BEST course of action when a critical issue outside the audit scope is discovered on an employee workstation? 

Answer options:

A. Take no action as this issue is outside the audit scope.
B. Expand the audit scope to include desktop audits.
C. Include the findings with recommendations in the final report.
D. Record the observation in the workpapers.

C