A company researched the root cause of a recent vulnerability in its software. It was determined
that the vulnerability was the result of two updates made in the last release. Each update alone
would not have resulted in the vulnerability. In order to prevent similar situations in the future, the
company should improve which of the following?

A.
Change management procedures
B.
Job rotation policies
C.
Incident response management
D.
Least privilege access controls