A member of the software development team has requested advice from the security team to implement a new
secure lab for testing malware. Which of the following is the NEXT step that the security team should take?

A.
Purchase new hardware to keep the malware isolated.

B.
Develop a policy to outline what will be required in the secure lab.

C.
Construct a series of VMs to host the malware environment.

D.
Create a proposal and present it to management for approval.