The chief operations officer (COO) has questioned the need for end-user training. Which of the
following is the most effective response?

A.
Indicate that you will not be responsible for the next virus outbreak.

B.
Remind the CEO about the last virus attack and the expense incurred.

C.
Explain that the cost of end-user training is a fraction of the cost of the last security breach
caused by end users.

D.
Provide statistics that definitively show how end-user training reduces the likelihood of security
breaches on the corporate network.

Explanation: