27. These tests of the security controls involve various methods of entering the company's system to determine whether controls are working as intended.

a. Vulnerability assessment

b. IT systems documentation

C. Authenticity tests

d. Penetration tests