Exam IIA-CIA-Part1 topic 1 question 77 discussion

Which of the following actions would be considered a violation of the Standards?
I. Drafts of engagement communications were reviewed with the audit client to obtain input. The client's comments were considered when developing the engagement final communication.
II. An auditor participated as part of a development team to review the control procedures to be incorporated into a major computer application under development.
III. Given limited resources, the chief audit executive performed a risk analysis to determine which functions to audit.