The IT security defense$-$in$-$depth model starts with $\_\_\_\_\_\_\_\_.$

A$.$ Senior management commitment and support

B$.$ IT security procedures and enforcement

C$.$ Hardware and software selection

D$.$ Acceptable use policies and IT security training