An Airline Contracted with an External Service Provider to Perform

An airline contracted with an external service provider to perform maintenance on all aircraft ground support equipment. Management then asked the internal audit activity (IAA) to evaluate the controls in place that would permit appropriate oversight of the service provider in maintaining required maintenance standards. According to the International Professional Practices Framework, which of the following would be the most appropriate course of action for the IAA to undertake to establish the engagement objectives?

A) Develop a draft audit plan and create an appropriate scope and resource schedule.
B) Develop a preliminary audit program and obtain senior management's approval.
C) Conduct a preliminary assessment of the risks associated with the maintenance contract.
D) Obtain a copy of the maintenance contract and review the contract for pricing discrepancies.