According to best practice, which of the following is required when implementing third party
software in a production environment?

A.
Scan the application for vulnerabilities

B.
Contract the vendor for patching

C.
Negotiate end user application training

D.
Escrow a copy of the software