What is the MOS T cost-effective means of improving security awareness of staff personnel?

What is the MOS T cost-effective means of improving security awareness of staff personnel?

A.
Employee monetary incentives

B.
User education and training

C.
A zero-tolerance security policy

D.
Reporting of security infractions

Explanation:

User education and training is the most cost-effective means of influencing staff to improve
security since personnel are the weakest link in security. Incentives perform poorly without user
education and training. A zero-tolerance security policy would not be as good as education and

training. Users would not have the knowledge to accurately interpret and report violations without
user education and training.