In a small organization, an employee performs computer operations and, when the situation demands, program modifications. Which of the following should the IS auditor recommend? 
A、Automated logging of changes to development libraries 
B、Additional staff to provide separation of duties 
C、Procedures that verify that only approved program changes are implemented 
D、Access controls to prevent the operator from making program modifications