Which of the following should be an IS auditor's PRIMARY concern after discovering that the scope of an IS project has changed and an impact study has not been performed?
Select an answer:
A.
The time and cost implications caused by the change
B.
The risk that regression tests will fail
C.
Users not agreeing with the change
D.
The project team not having the skills to make the necessary change
