What is the PRIMARY reason to adopt a risk-based IS audit strategy?

To achieve synergy between audit and other risk management functions

To prioritize available resources and focus on areas with significant risk

To reduce the time and effort needed to perform a full audit cycle

To identify key threats, risks, and controls for the organization