The third objective in an IS audit is ensuring proper program modification. Select all of the following controls that would be effective in minimizing the program modification threats faced by an information system.

a. User authorization of source data input

b. Use of turnaround documents

c. List program components to be modified

d. Management authorization and approval of program modifications

e. User approval of program change specifications