Company A is purchasing Company B. Company A uses a change management system for all IT
processes while Company B does not have one in place. Company B’s IT staff needs to purchase
a third party product to enhance production. Which of the following NEXT steps should be
implemented to address the security impacts this product may cause?

A.
Purchase the product and test it in a lab environment before installing it on any live system.

B.
Allow Company A and B’s IT staff to evaluate the new product prior to purchasing it.

C.
Purchase the product and test it on a few systems before installing it throughout the entire
company.

D.
Use Company A’s change management process during the evaluation of the new product.