Which is the correct order of the audit first methodology?
a. Preventive controls - Detective controls - Forensic controls - Threat analysis - Audit controls
b. Threat analysis - Audit controls - Forensic controls - Detective controls - Preventive controls
c. Preventive controls - Detective controls - Threat analysis - Forensic controls - Audit controls