A security manager is developing new policies and procedures. Which of the following is a best
practice in end user security?

A.
Employee identity badges and physical access controls to ensure only staff are allowed onsite.

B.
A training program that is consistent, ongoing, and relevant.

C.
Access controls to prevent end users from gaining access to confidential data.

D.
Access controls for computer systems and networks with two-factor authentication.