An organization is deploying a new system to the production environment. A security analyst discovers the system is not properly hardened or patched. Which of the following BEST describes the scenario?
A. A secure baseline was not established early in the process.
B. User acceptance testing was not completed.
C. Integrity checks were not conducted to ensure it was the correct system.
D. An application code error was introduced during the development phase.