An effective security program requires a balanced application of

A.
Technical and nontechnical methods

B.
Countermeasures and safeguards

C.
Physical security and technical controls

D.
Procedural security and encryption

Explanation:
A. Security is not defined by a firewall, an access control mechanism, a security policy, company procedures, employee conduct, or authentication technologies. It is defined by all of these and how they integrate together within an environment. Security is neither purely technical nor purely procedural, but rather a mix of the two.