In your companys first ever security awareness training class, Ron asked the question "Why do we have to have security awareness training anyway?" What should the trainers answer be?

A.
To comply with stockholders’ requirements

B.
To improve the company’s industry reputation

C.
To instill fear and work as a deterrent for the individuals who may attempt malicious activities

D.
To improve all employee attitudes and behaviors toward security

Explanation:
Security awareness training is intended to help educate employees about the security
approach the company is taking. A good security awareness program should sway
employee attitudes and behaviors, so that they are part of the solution and not part
of the problem.