An IS auditor is asked to identify risk within an organization’s software development project. The project manager tells the auditor that an agile development methodology is being used to minimize the lengthy development process. Which of the following would be of GREATEST concern to the auditor?

A. Each team does its own testing.
B. The needed work has not yet been fully identified.
C. Some of the developers have not attended recent training.
D. Elements of the project have not been documented.