A computer program used by multiple departments has data quality issues. There is no agreement as to who should be responsible for corrective action. Which of the following is an IS auditor’s BEST course of action?

A. Recommend the IT department be assigned data cleansing responsibility.
B. Modify the program to automatically cleanse the data and close the issue.
C. Assign responsibility to the primary department using the program.
D. Note the disagreement and recommend establishing data governance.