Company XYZ has encountered an increased amount of buffer overflow attacks. The programmer
has been tasked to identify the issue and report any findings. Which of the following is the FIRST
step of action recommended in this scenario?

A.
Baseline Reporting

B.
Capability Maturity Model

C.
Code Review

D.
Quality Assurance and Testing