To integrate security into system development life cycle (SDLC) processes, an organization MUST ensure that security:

A. is represented on the configuration control board.
B. performance metrics have been met.
C. roles and responsibilities have been defined.
D. is a prerequisite for completion of major phases.