What should an IS auditor do when informed that some recommendations cannot be implemented due to financial constraints?

A. Document management’s response in the working papers.
B. Insist the recommendations be implemented.
C. Agree to waive the recommendations.
D. Suggest management identify cost-effective alternatives.