For a semester exam, which option is correct about secure software concepts?

A. adding security only after deployment B. building software so confidentiality, integrity and availability are considered from the start C. removing all user authentication D. focusing only on interface colors