On-going annual awareness security training should be coupled with:

A.
succession planning.

B.
implementation of security controls.

C.
user rights and permissions review.

D.
signing of a user agreement.