Which of the following should be of MOST concern to a risk practitioner reviewing findings from a recent audit of an organization’s data center?

A. Ownership of an audit finding has not been assigned
B. The data center is not fully redundant
C. Audit findings were not communicated to senior management
D. Key risk indicators (KRIs) for the data center do not include critical components