Which of the following is typically a responsibility of a PSIRT (Product SIRT)?

Which of the following is typically a responsibility of a PSIRT (Product SIRT)?
A. Configure the organization’s firewall
B. Monitor security logs
C. Investigate security incidents in a security operations center (SOC)
D. Disclose vulnerabilities in the organization’s products and services