An organization has recently incorporated robotic process automation. Which of the following would be of GREATEST concern to an IS auditor?

A. Controls have not been tested
B. A governance structure has not been implemented
C. A risk assessment has not been conducted
D. The adoption rate for the new technology has been low