Refer to the information below to answer the question.
An organization has hired an information security officer to lead their security department. The
officer has adequate people resources but is lacking the other necessary components to have an
effective security program. There are numerous initiatives requiring security involvement.
Which of the following is considered the MOST important priority for the information security
officer?

A.
Formal acceptance of the security strategy

B.
Disciplinary actions taken against unethical behavior

C.
Development of an awareness program for new employees

D.
Audit of all organization system configurations for faults