As an information systems auditor, you noted while reviewing application change management that changes to the code are deployed by developers to the production environment. You learned that this is a potential segregation of duties issues and noted that developers might have excessive access. Your next step will be:

Discuss the potential issue with your IT audit managerDiscuss the issue with management immediatelyStart drafting the narrative for the issue to be included in the audit reportWait for fieldwork to be completed before reporting the issue