The primary reason for an IS risk$-$based audit approach is:

Group of answer choices

$($a$)$ To control costs within the IS function.

$($b$)$ To show management the areas in which the controls are deficient.

$($c$)$ To show the audit committee that IS audit is being carried out in an appropriate manner.

$($d$)$ To permit the efficient allocation of limited IS audit resources.