What methods are not used by IT auditors to obtain evidence of ITGCs in companies they audit?

Question $4$ options:

Inspecting supporting documentation showing evidence of the performance of controls

Performing a walk$-$through of the process to assess the operational effectiveness of the controls

Using surveys and focus groups to gain information about the efficiency of controls

Sampling of changes made to ERP and access into ERP