What is the purpose of using security controls in an organization?

a$.$

They reduce or mitigate the risk to an organization's assets.

b$.$

Protect the confidentiality, integrity, and availability of information.

c$.$

Safeguard or compose countermeasures to avoid, detect, counteract, or minimize security risks to physical property, computer systems, or other assets.

d$.$

All of the above.