Which of the following would BEST ensure that application security standards are in place?

A. Functional testing
B. Performing a code review
C. Publishing software coding standards
D. Penetration testing