Which of the following ensures that updates to policies, procedures, and configurations are made in a controlled and documented fashion?


A. Regulatory compliance
B. Peer review
C. Change management
D. Penetration testing