26.XYZ company is reviewing the top 20 CIS controls at the end of the year to make changes for the upcoming fiscal year. They bring in a new software developer to work alongside the current developer in order to ensure there are multiple sets of eyes reviewing the coding of the software and development of web applications and to also ensure secure coding practices. XYZ company is essentially trying to manage the security life cycle of all in-house and acquired software to prevent, detect and control security weaknesses. Which of the following controls describes this?

(a) Application Software Security

(b) Data Protection

(c) Malware Defenses

(d) Account Monitoring and control