The system owners can supplement the common controls with system specific or hybrid controls. What constitutes the reason for this action?
a) Enhanced security
b) Specific system requirements
c) Regulatory compliance
d) All of the above