When an organization outsources a payroll system to a cloud service provider, the IS auditor’s PRIMARY concern should be the:

A. service level agreement (SLA) is not reviewed annually.
B. lack of independent assurance from a third party.
C. service provider's data center is on the ground floor.
D. service provider's platform is not compatible with legacy systems.