How can an organization reduce vulnerabilities to their environment?

A.
By minimizing attack surface and maximizing work factor
B.
By maximizing attack surface and minimizing work factor
C.
By minimizing both attack surface and work factor
D.
By maximizing both attack surface and work factor