Which of the following is the MOST beneficial to review when performing an IT audit?

Which of the following is the MOST beneficial to review when performing an IT audit?

A.
Audit policy

B.
Security log

C.
Security policies

D.
Configuration settings