NO$\mathrm{.}28$ After the merger of two organizations, which of the following is the MOST important task for an IS auditor to perform?$($A$).$ Verifying that access privileges have been reviewed$($B$).$ investigating access rights for expiration dates$($C$).$ Updating the continuity plan for critical resources $($D$).$ Updating the security policy