To BEST determine if a project is successfully addressing business requirements while managing the associated risk, which of the following should an IS auditor expect to find at each significant milestone?

A. Comprehensive end user acceptance testing
B. Formal acceptance by appropriate stakeholders
C. A revised business impact and risk analysis
D. Post-implementation review with affected parties