In secure software design and development, what is meant by defense in depth?

A. relying only on obscurity B. using one password everywhere C. using multiple layers of controls so failure of one control does not expose the whole system D. disabling backups