Which of the following would be the MOST critical finding of an application security and DevOps audit?

Which of the following would be the MOST critical finding of an application security and DevOps audit?
A . The organization is not using a unified framework to integrate cloud compliance with regulatory requirements.
B . Application architecture and configurations did not consider security measures.
C . Outsourced cloud service interruption, breach or loss of data stored at the cloud service provider.
D . Certifications with global security standards specific to cloud are not reviewed and the impact of noted findings are not assessed.

Answer: B