Which of the following is a PRIMARY role of an IS auditor in a control self-assessment (CSA) workshop? 

Answer options:

A. Reporting results of the workshop and recommendations to management
B. Gathering background information prior to the ׀¡SA workshop
C. Analyzing gaps between control design and control framework
D. Assisting participants in evaluating risks and relevant controls

C