Documentation is an important part of continuous monitoring. In this context, documentation comprises which of the following activities?
a. Making changes to the security plan that address any changes or proposed changes to the information system
b. Updating the plan of action and milestones
c. Establishing the accreditation boundary
d. Both a and b