An IS auditor is assessing a recent migration of mission critical applications to a virtual platform. Which of the following observations poses the GREATEST risk to the organization?

A. A post-implementation review of the hypervisor has not yet been conducted.
B. Role descriptions do not accurately reflect new virtualization responsibilities.
C. The migration was not approved by the board of directors.
D. Training for staff with new virtualization responsibilities has not been conducted.