Which of the following ensures that updates to policies, procedures, and configurations are
made in a controlled and documented fashion?
Regulatory compliance
Change management
Penetration testing