Which of the following is a substantive test?
A. Reviewing password history reports B. Ensuring approval for a program changes C. Using a related statistical list to inventory the CD library D. Checking a list of error reports