During a review of a large predictive software development project, an IS auditor finds that developers can move their code changes directly into the test and production libraries without any formal review or tracking of what was moved. Which control weakness represents the GREATEST concern to the auditor?