An IS auditor is performing a follow-up audit and notes that some critical deficiencies have not been addressed. The auditor's BEST course of action is to:

A. assess the impact of not addressing deficiencies.
B. document management's reasons for not addressing deficiencies.
C. postpone the audit until the deficiencies are addressed.
D. provide new recommendations.