An IS auditor has been asked to audit the proposed acquisition of new computer hardware. The auditor’s PRIMARY concern is that:

A. the implementation plan meets user requirements.
B. a clear business case has been established.
C. the new hardware meets established security standards.
D. a full, visible audit trail will be included.