An IS auditor finds an organization has a significant number of systems developed by end-users. Which of the following is the BEST recommendation to help mitigate the associated risks?

A. Storing systems on a shared drive managed by IT
B. Storing developed source code in a centralized repository
C. Centralizing information technology procurement
D. Using a formal development methodology