When developing an effective risk-based plan to determine audit priorities, an internal audit activity should start by:

When developing an effective risk-based plan to determine audit priorities, an internal audit activity should start by:
A . Identifying risks to the organization’s operations.
B . Observing and analyzing controls.
C . Prioritizing known risks.
D . Reviewing organizational objectives.

Answer: D