Which of the following actions MUST be taken if a vulnerability is discovered during the maintenance
stage in a System Development Life Cycle (SDLC)?

A.
Make changes following principle and design guidelines.

B.
Stop the application until the vulnerability is fixed.

C.
Report the vulnerability to product owner.

D.
Monitor the application and review code.