Which of the following should be of GREATEST concern to an IS auditor during a review of business continuity controls?

A、The business continuity plan (BCP) has not been updated in the past year
B、Many of the control procedures are manual.
C、Business continuity testing has not been performed.
D、The business impact analysis (BIA) does not cover all business functions