The first and most fundamental strategy for minimizing security threats is which of the following?
a. Establish access controls
b. Implement an employee security awareness program
c. Establish a secure organization
d. Conduct a risk analysis