In a typical SDLC, which group is PRIMARILY responsible for confirming compliance with requirements?

A. Steering committee
B. Risk management
C. Quality assurance
D. Internal audit