During the procurement of a new information system, it was determined that some of the security
requirements were not addressed in the system specification. Which of the following is the MOST
likely reason for this?

A.
The procurement officer lacks technical knowledge.

B.
The security requirements have changed during the procurement process.

C.
There were no security professionals in the vendor’s bidding team.

D.
The description of the security requirements was insufficient.