During a follow-up audit for a finding related to change management, an IS auditor notes that one of the changes sampled was an emergency change, which follows a different process. Which of the following is the auditor's BEST course of action?

A. Mark the sample as not applicable in the workpaper and move or to testing the next sample.
B. Select a replacement change for testing.
C. Obtain evidence that the change was approved.
D. Note the sample as a deviation and leave the finding open in the audit tracking log.