A state government agency recently underwent an audit of its information security controls. The purpose of the audit was to identify and fix any problems, making the computing environment more secure$.$ However, the small team conducting the audit took much longer than anticipated. What is the most likely reason?

Question $10$ options:

There were no clear guidelines for the auditors to evaluate each element of the organization's security policy, so the team audited more information than was necessary.

The team failed to create backups of the audit information.

The administrator did not enable Read or List auditing on any objects.

The administrator did not enable auditing for folders used in normal business operation.