An IS auditor attempting to determine whether access to program documentation is restricted to authorized persons would MOST likely: 
A、evaluate the record retention plans for off-premises storage. 
B、interview programmers about the procedures currently being followed. 
C、compare utilization records to operations schedules. 
D、review data file access records to test the librarian function.