After the merger of two organizations, which of the following is the MOST important task for an IS auditor to perform?

A. Investigating access rights for expiration dates
B. Verifying that access privileges have been reviewed
C. Updating the security policy
D. Updating the continuity plan for critical resources