If an internal auditor identifies an exception while testing, which of the following may be appropriate?

(A) Test additional items to determine whether the exception is an isolated occurence.

(B) Gain an understanding of the root cause, that is the reason the exception occured

(C) Draft an observation for the audit report

(D) All of the above