Which of the following ensures that updates to policies, procedures, and configurations are made in

Which of the following ensures that updates to policies, procedures, and configurations are made
in a controlled and documented fashion?

A.
Regulatory compliance

B.
Peer review

C.
Change management

D.
Penetration testing