A quality auditor finds suspicious code during a software test. For which of the following could this be a trigger?

A. Incident response
B. Quality control
C. Resource changes
D. Business continuity response