Management has announced the acquisition of a new company. The information security manager of parent company is concerned that conflicting access rights may cause critical information to be exposed during the integration of the two companies. To BEST address this concern, the information security manager should:

A. escalate concern for conflicting access rights to management.
B. implement consistent access control standards.
C. review access rights as the acquisition integration occurs.
D. perform a risk assessment of the access rights.