Which of the following are required before a patch can be applied?

Which of the following are required before a patch can be applied? (Select all that apply.)
A. Formally start a request for change.
B. Perform a security assessment.
C. Verify that the patch works correctly.
D. Test the patch in the lab.