For a semester exam, which option is correct about security requirement traceability?

A. losing requirement history B. renaming files randomly C. linking security requirements to design, code and tests D. deleting test cases