The IS auditor of a power company finds that the radio link to a remote mountain site is experiencing systematic outages under specific weather conditions. The communications manager explains that increasing the radio power would require a new license and would help little. What is the MOST appropriate action by the IS auditor?

A. Recommend that the site’s data collection and transmission be non-interruptible.
B. Review the installation license, permissions and associated costs.
C. Recommend that the site’s hardware be upgraded to record data during outages.
D. Gather additional information to identify threats, vulnerabilities, and impact.