A.Encryption and checksums, access auditing, and data integrity and operational security controls.

B.The sum of all paths for data and commands into and out of the app

C.The resource connection and authentication, authorization, activity logging, data validation, and encoding

D.All the different points where an attacker could get into an app and exfiltrate data.