A Company Researched the Root Cause of a Recent Vulnerability

A company researched the root cause of a recent vulnerability in its software. It was determined that the vulnerability was the result of two updates made in the last release. Each update alone would not have resulted in the vulnerability. In order to prevent similar situations in the future, the company should improve which of the following?

A) Change management procedures
B) Job rotation policies
C) Incident response management
D) Least privilege access controls