A product security analyst has been assigned to evaluate and validate a new product's security capabilities.
Part of the evaluation involves reviewing design changes at specific intervals for security deficiencies, recommending changes, and checking for changes at the next checkpoint. Which of the following BEST describes the activity being conducted?

A. User acceptance testing
B. Stress testing
C. Code review
D. Security regression testing