An organization disabled unneeded services and placed a firewall in front of a business-critical legacy system.
Which of the following best describes the actions taken by the organization?


A. Exception
B. Segmentation
C. Risk transfer
D. Compensating controls