2631During a change control audit of a production system, an IS auditor finds that the change management process is not formally documented and that some migration procedures failed. What should the IS auditor do next?

A、Recommend redesigning the change management process.
B、Gain more assurance on the findings through root cause analysis.
C、Recommend that program migration be stopped until the change process is documented.
D、Document the finding and present it to management.