Sara, a security manager, has decided to force expiration of all company passwords by the close
of business day. Which of the following BEST supports this reasoning?
A.
A recent security breach in which passwords were cracked.
B.
Implementation of configuration management processes.
C.
Enforcement of password complexity requirements.
D.
Implementation of account lockout procedures.