In the context of Continuous

Integration$/$Continuous Delivery $(C\frac{l}{C}D)$ and security automation, which of the following is an example of an administrative control?

a$)$ Performing penetration testing on the new code in the production environment

b$)$ Running automated vulnerability scans against the staging environment

c$)$ Verifying that new software meets a defined set of requirements and approvals

d$)$ Implementing real$-$time monitoring for detecting security incidents in the live environment

a$)$

b$)$

c$)$

d$)$