Which of the following findings should be of GREATEST concern to an IS auditor assessing the risk associated with end-user computing (EUC) in an organization?

Lack of defined criteria for EUC applications is a governance weakness, but having clear ownership is a foundational element that helps establish and enforce those criteria.

Lack of awareness training is a risk factor, but clear ownership would help ensure that the need for such training is identified and implemented for EUC users.

Without clear ownership, there is no single individual or department accountable for the development, maintenance, security, and accuracy of an EUC application. This lack of accountability significantly elevates risks such as data errors, security vulnerabilities, unmanaged changes, and compliance issues, making it difficult to establish proper controls and manage the lifecycle of these critical tools effectively.

Insufficient version control testing is a significant technical risk for EUC applications, but having clear ownership is fundamental to implementing and enforcing robust version control processes and testing effectively.