What would be of GREATEST concern to an IS auditor observing shared key cards being utilized to access an organization’s data center?

A. The lack of a multi-factor authentication system
B. The inability to identify who has entered the data center
C. The inability to track the number of misplaced cards
D. The lack of enforcement of organizational policy and procedures