A company invested ten percent of its entire annual budget in security technologies. The Chief Information Officer (C

IO) is convinced that, without this investment, the company will risk being the next victim of the same cyber attack its competitor experienced three months ago. However, despite this investment, users are sharing their usernames and passwords with their c

oworkers to get their jobs done. Which of the following will eliminate the risk introduced by this practice?

A. Invest in and implement a solution to ensure non-repudiation

B. Force a daily password change

C. Send an email asking users not to share their

credentials

D. Run a report on all users sharing their credentials and alert their managers of further actions