An IS auditor is performing a follow-up audit for findings identified in an organization's user provisioning process. Which of the following is the MOST appropriate population to sample from when testing for remediation?

A. All users who have followed user provisioning processes provided by management
B. All users provisioned after the finding was originally identified
C. All users provisioned after management resolved the audit issue
D. All users provisioned after the final audit report was issued