The second objective in an IS audit is ensuring proper program development and acquisition. Select all of the following controls that would be effective in minimizing the program development and acquisition threats faced by an information system.

a. Management authorization for program development and software acquisition

b. Reconciliation of batch totals

c. Thorough testing of new programs, including user acceptance tests

d. Fault-tolerant systems design

e. Casualty and business interruption insurance