An internal auditor at a mid$-$sized manufacturing organization has been tasked with evaluating the effectiveness of the organization$$s governance processes. The CAE has recommended adopting an established framework for this evaluation. In the absence of an adopted framework, which action should the CAE take to ensure a comprehensive assessment?

A$.$Rely on the organization$$s existing policies and procedures without an established framework.

B$.$Use a combination of different frameworks to cover all possible areas.

C$.$Recommend the adoption of a globally recognized framework, such as the one provided by COSO.

D$.$Develop a custom framework tailored to the organization$$s specific needs.