A management letter resulting from an IT audit $($i$.$e$.,$ IT management letter$)$ should include which section$($s$)?$

A recommendation

A description of the finding or observation

A description of the IT risk related to the finding

All of the above