Which of the following should be of GREATEST concern to a newly hired information security manager regarding security compliance?

A. Lack of risk assessments
B. Lack of standard operating procedures
C. Lack of security audits
D. Lack of executive support