An IS auditor reviewing the threat assessment for a data center would be MOST concerned if: 

Answer options:

A. all identified threats relate to external entities
B. some of the identified threats are unlikely to occur
C. neighboring organizations` operations have been included
D. the exercise was completed by local management

D