Pen testing should be performed under which of the following circumstances? Choose all that apply.

a$.$ A new software system or an update to a software system has been installed.

b$.$ Performed as dictated by compliance standards such as PCI D$55.$

c$.$ A new computer system has been installed.

d$.$ Following a regular schedule to make sure no unknown changes have impacted security.