An Application Vulnerability Assessment Has Identified a Security Flaw in an Application

An application vulnerability assessment has identified a security flaw in an application. This is a flaw that was previously identified and remediated on a prior release of the application. Which of the following is MOST likely the reason for this recurring issue?

A) Lack of version/source controls
B) Lack of change management controls
C) Ineffective configuration management controls
D) High turnover in the application development department