Which of the following is the best definition of the Design and Build in Security $($DBS$)$ capability?

$1.$

The DBS capability provides the identification of security threat vectors, detection of security violation events, and classification of event impacts.

$2.$

The DBS capability addresses software acquired or newly developed to ensure that security and privacy is built in during all stages of the System Development Life Cycle $($SDLC$).$

$3.$

The DBS capability focuses on the in$-$depth security root cause analysis, prioritization of security mitigation response $/$ recovery, notification and post$-$incident activity.

$4.$

The DBS capability includes the application of cryptographic methods as well as hiding sensitive data field values using data masking of obfuscation methods.