Which of the following statements is true?

a. The concept of defense-in-depth reflects the fact that security involves the use of a few, sophisticated technical controls.

b. Information security is primarily a management issue.

c. The time-based model of security can be expressed in the following formula: P < D + C.

d. Symmetric encryption is slower than asymmetric encryption.