Which of the following should be of GREATEST concern to an IS auditor conducting an audit of an organization’s backup processes?

A. A written backup policy is not available.
B. Backup failures are not resolved in a timely manner.
C. The restoration process is slow due to connectivity issues.
D. The service levels are not achieved.