Which of the following would provide the BEST evidence for an IS auditor to determine whether segregation of duties is in place?

A. A review of the organizational chart
B. A review of personnel files
C. An analysis of user access requests
D. A walk-through of job functions