For a semester exam, which option is correct about security in the SDLC?

A. integrating security requirements, design, coding, testing and maintenance throughout development B. checking security only after a breach C. using no threat modeling D. publishing source code publicly by default