Following a significant change to the underlying code of an application, it is MOST important for the information security manager to:

A. inform senior management

B. update the risk assessment

C. validate the user acceptance testing

D. modify key risk indicators