One of the manual controls necessary for managing risk is , a type of formal management verification. In the process, management confirms that a condition is present and that security controls and policies are in place. O A. log reviews O B. attestation O C. an access rights review O D. a background check