Which of the following ensures that updates to policies, procedures, and configurations are made in a
controlled and documented fashion?

A.
Regulatory compliance

B.
Peer review

C.
Change management

D.
Penetration testing