A post-implementation review of a system implementation has identified that the defined objectives were changed several times without the approval of the project board. What should the IS auditor do NEXT?

A. Notify the project sponsor and request that the project be reopened.
B. Ask management to obtain retrospective approvals.
C. Notify the project management office and raise a finding.
D. Determine whether the revised objectives are appropriate.