Which of the following findings should be of GREATEST concern to an IS auditor reviewing the effectiveness of an organization`s problem management practices? 

Answer options:

A. Problem records are prioritized based on the impact of incidents.
B. Some incidents are closed without problem resolution.
C. Root causes are not adequately identified.
D. Problems are frequently escalated to management for resolution.

C