Which of the following should an IS auditor review to gain an understanding of the effectiveness of controls over the management of multiple projects? A、Project database B、Policy documents C、Project portfolio database D、Program organization