When an IS auditor audits the SDLC of a decision support system, of which the development work is outsourced to the third-party, which of the following activity in relation to the system would most concern the IS auditor?
a) The cost spent to build the system
b) The ongoing maintenance support of the system
c) The implementation quality of the system
d) The number of staff works in the vendor