An IS auditor is assigned to audit a software development project which is more than 80 percent complete, but has already overrun time by 10 percent and costs by 25 percent. Which of the following actions should the IS auditor take? 
A、Report that the organization does not have effective project management. 
B、Recommend the project manager be changed. 
C、Review the IT governance structure. 
D、Review the conduct of the project and the business case.