Which of the following should an IS auditor be MOST concerned with during a post-implementation review?

A. The system does not have a maintenance plan
B. The system contains several minor defects
C. The system was over budget by 15%
D. The system deployment was delayed by three weeks