Which of the following is MOST important for an IS auditor to determine when evaluating a database for privacy-related risks?

A. Whether copies of production data are masked
B. Whether the integrity of the data dictionary is maintained
C. Whether data import and export procedures are approved
D. Whether all database tables are normalized