Which of the following scenarios applies to entities that complete a Self-Assessment Questionnaire (SAQ)? (A) The entity is only eligible to use the customized approach if they elect to have a QSA perform their assessment and document it within a ROC (B) The entity can use the customized approach provided they perform and document a targeted risk analysis (C) The entity can use the customized approach formeeting approved PCI DSS requirements with no further approvals needed (D) The entity is eligible to use the customized approach if approved by senior management