Sara, a security manager, has decided to force expiration of all company passwords by the close
of business day. Which of the following BEST supports this reasoning?

A.
A recent security breach in which passwords were cracked.

B.
Implementation of configuration management processes.

C.
Enforcement of password complexity requirements.

D.
Implementation of account lockout procedures.