When assessing a business case as part of a post-implementation review, the IS auditor must ensure that the:

A. feasibility of alternative project approaches has been assessed.
B. business case has not been amended since project approval.
C. quality assurance measures have been applied throughout the project.
D. amendments to the business case have been approved.