What process should be initiated when changes to the information system negatively impact the security of the system or when a period of time has elapsed as specified by agency or federal policy?
a. Incident response
b. Systems engineering
c. Reaccreditation
d. Reclassification of data