Which of the following MUST exist for an activity to be considered an audit?

An auditor that is in no way employed, connected or associated to the organization being audited

Stored Personally Identifiable Information (PII) that an organization has a legal obligation to protect

A predefined standard and systematic approach to test the application of that standard

A certified member of a professional body qualified in the area of inspection