A PRIMARY benefit derived from an organization employing control self-assessment (CSA) techniques is that it:

A. A can identify high-risk areas that might need a detailed review later

B. allows IS auditors to independently assess risk

C. can be used as a replacement for traditional audits

D. allows management to relinquish responsibility for control.