A company decides to purchase commercially available software packages. This can introduce new security risks to the network. Which of the following is the
BEST description of why this is true?

A.
Commercially available software packages are typically well known and widely available.
Information concerning vulnerabilities and viable attack patterns are never revealed by the developer to avoid lawsuits.

B.
Commercially available software packages are often widely available. Information concerning vulnerabilities is often kept internal to the company that developed
the software.

C.
Commercially available software packages are not widespread and are only available in limited areas. Information concerning vulnerabilities is often ignored by
business managers.

D.
Commercially available software packages are well known and widely available. Information concerning vulnerabilities and viable attack patterns are always
shared within the IT community.