Your company, ImSecure Inc., is a security investigation firm. You have been contacted by Darling Company, a producer of cardstock for greeting card companies like Hallmike and Birthday Wishes Company. Darling currently requires orders to be placed several weeks in advance of the delivery date. Orders come in through traditional channels (account reps, paper forms, etc.). Hallmike, Darling's largest client, now requires Darling to use e-commerce for order transmission and payment. Because of this new change, Darling is considering moving all of its clients to EDI for orders and payments. You advise Darling that moving to EDI for orders and payments would provide new opportunities for internal and external perpetrators to defraud the company.

Which of these would provide opportunities for internal perpetrators of e-commerce fraud?

a. Improperly secured software or not updating systems with critical updates from vendors

b. Spoofing IP addresses to impersonate vendors in electronic funds transfers.

c. SQL injections and/or cross-site scripting that crashes customer portals or publishes secret customer information to hackers

d. The implementation of new, electronic systems