An organization has implemented a distributed security administration system to replace the previous centralized one. The IS auditor’s GREATEST concern should be that:

A. security procedures may be inadequate to support the change.
B. end-user acceptance of the new system is likely to be difficult to obtain.
C. the new system will require additional training.
D. a distributed security system is inherently a weak security system.