Which of the following are common security threat mitigation techniques?

A.
Allowing unauthorized devices to connect to the network

B.
User training, updating policies and procedures

C.
Letting users update their own virus definitions

D.
Setting up a PAP connection to provide a point-to-point connection