An organization with high availability resource requirements is selecting a provider for cloud computing. Which of the following would cause the GREATEST concern to an IS auditor? The provider:

A. is not internationally certified for high availability.
B. does not store backup media offsite.
C. deploys patches automatically without testing.
D. hosts systems for the organization's competitor.