Which of the following is the BEST information source for management to use as an aid in the identification of assets that are subject to laws and regulations? 
A、Security incident summaries 
B、Vendor best practices 
C、CERT coordination center 
D、Significant contracts