A risk practitioner has become aware of production data being used in a test environment. Which of the following should be the practitioner’s PRIMARY concern?

A. Security of the test environment.
B. Readability of test data.
C. Sensitivity of the data.
D. Availability of data to authorized staff.