For a semester exam, which option is correct about software acceptance?

A. deploying without approval B. accepting all known critical vulnerabilities C. formal decision that software meets required criteria including security expectations D. ignoring failed tests