An AI auditor is assessing an organization's AI training data governance. The auditor finds that data scientists can modify training datasets without requiring documented approval. Which audit finding does this represent?

B is correct because unauthorized modification of training data undermines data integrity — changes could introduce bias, degrade model performance, or be used maliciously (data poisoning) — making this a significant data integrity control weakness requiring formal change management. A ignores the risk of undocumented changes. C overstates the response. D understates the finding's materiality.