Which of the following would be the GREATEST concern to an IS auditor reviewing an IT outsourcing arrangement?

A. Several IT personnel perform the same functions as the vendor.
B. The contract does not include a renewal option.
C. Development of KPIs that will be used was assigned to the vendor.
D. Some penalties were waived during contract negotiations.