Security awareness training programs have all of the following characteristics except:

A.
Enforced by department heads

B.
Simple, clear, and concise

C.
Ongoing

D.
Entertaining and positive

Explanation:
Security awareness should ideally be championed by senior management, which
emphasizes the importance of the program to all employees. While department heads
will certainly be involved in the program, the executive team should have their
names on it.