Which of the following actions MUST be taken if a vulnerability is discovered during the

maintenance stage in a System Development Life Cycle (SDLC)?

AMake changes following principle and design guidelines.

BStop the application until the vulnerability is fixed.

CReport the vulnerability to product owner.

DMonitor the application and review code.