An IS auditor notes that application of super-user activity was not recorded in system logs. What is the auditor`s BEST course of action? 

Answer options:

A. Recommend a least-privilege access model.
B. Investigate the reason for the lack of logging.
C. Report the issue to the audit manager.
D. Recommend activation of super-user activity logging.

B