An IS auditor finds that confidential company data has been inadvertently leaked through social engineering.
The MOST effective way to help prevent a recurrence of this issue is to implement:
A . penalties to staff for security policy breaches.
B . a third-party intrusion prevention solution.
C . a security awareness program.
D . data loss prevention (DLP) software.
Answer: C