An IS auditor is evaluating the access controls at a multinational company with a shared network infrastructure. Which of the following is MOST important?

A. Simplicity of end-to-end communication paths
B. Remote network administration
C. Common security policies
D. Logging of network information at user level