Which of the following ensures components of an IT system are identified and baselined, and that changes to them are implemented in a controlled manner?

A. Restricted production access
B. Configuration management process
C. Change management process
D. Software versioning control