Which approach to information security emphasizes the assumption that any device can be compromised and any employee can be impersonated?

Question $13$ options:

A$)$

secure by design

B$)$

trust, but verify

C$)$

never trust, always verify

D$)$

zero tolerance