Which of the following would present the GREATEST risk to the effectiveness of a security operations center for a global financial institution processing transactions 24×7?

A. Incident response reporting is based on open source software.
B. Incident response is conducted from a single location during normal business hours.
C. Correlation of events excludes logs for pre-production systems.
D. The incident response function is outsourced to a third-party provider.