When preparing an audit report the IS auditor should ensure that the results are supported by: 
A、statements from IS management. 
B、workpapers of other auditors. 
C、an organizational control self-assessment. 
D、sufficient and appropriate audit evidence.