An effective security program requires a balanced application of:

A.
Technical and non-technical methods

B.
Countermeasures and safeguards

C.
Physical security and technical controls

D.
Procedural security and encryption

Explanation:
Security is not defined by a firewall, an access control mechanism, a
security policy, company procedures, employee conduct, or authentication
technologies. It is defined by all of these and how they integrate together within
an environment. Security is not purely technical and it is not purely procedural,
but a mix of the two.