Which of the following would raise security awareness among an organization’s employees?

A.
Distributing industry statistics about security incidents

B.
Monitoring the magnitude of incidents

C.
Encouraging employees to behave in a more conscious manner

D.
Continually reinforcing the security policy

Explanation:

Employees must be continually made aware of the policy and expectations of their behavior.
Choice A would have little relevant bearing on the employee’s behavior. Choice B does not involve
the employees. Choice C could be an aspect of continual reinforcement of the security policy.