Which of the following should be the GREATEST concern for an IS auditor performing a post-implementation review for a major system upgrade?
- A.Changes are promoted to production by the development group.
- B.Developers have access to the testing environment.
- C.Object code can be accessed by the development group.
- D.Change approvals are not formally documented.