Which of the following should be of GREATEST concern to an IS auditor conducting a security review of a point-of-sale (POS) system? 

Answer options:

A. Management of POS systems is outsourced to a vendor based in another country.
B. POS systems are not integrated with accounting applications for data transfer.
C. Credit card verification value (CVV) information is stored on local POS systems.
D. An optical scanner is not used to read bar codes for generating sales invoices.

B