An IT steering committee is presented with an audit finding that new software applications are delivered on time but consistently have unacceptable levels of defects. Which of the following would be…

Implementing performance indicators might help monitor the problem, but it doesn't address the underlying cause of the defects or provide a solution to fix them.

Evaluating the change management process is relevant for managing changes, but it's less direct than QA for consistent software defects originating in the development and testing phases.

Establishing code peer reviews is a good practice for improving code quality, but it's a specific tactic that falls under a broader quality assurance strategy, making a full QA process evaluation more comprehensive.

Evaluating the quality assurance (QA) process is the most direct and effective action because it investigates the entire system designed to prevent and detect defects throughout the software development lifecycle, identifying root causes for the consistently high defect rate before release.