What must Vulnerability Exceptions be supplied by default?

A. A reason for the exception

B. Integrations with GRC to handle the exception

C. Requirement Actions for the exception

D. A manual approval authority for the exception