Which of the following is a reason to perform user awareness and training?
A.
To enforce physical security requirements by staff
B.
To minimize the organizational risk posed by users
C.
To comply with law and vendor software best practices
D.
To identify the staff’s personally owned electronic devices