$.$A security engineer was auditing an organization$$s current software development practice and discovered that multiple open$-$source libraries were Integrated into the organization$$s software. The organization currently performs SAST and DAST on the software it develops. Which of the following should the organization incorporate into the SDLC to ensure the security of the open$-$source libraries? A$.$ Perform additional SAST$/$DAST on the open$-$source libraries. B$.$ Implement the SDLC security guidelines. C$.$ Track the library versions and monitor the CVE website for related vulnerabilities. D$.$ Perform unit testing of the open$-$source libraries Is it B or C$?$ Please explain