Which of the following is the MOST effective way to reduce risk to an organization from widespread use of web-based communication technologies?

A. Publish an enterprise-wide policy outlining acceptance use of web-based communication technologies.
B. Incorporate risk awareness training for web-based communications into the IT security program.
C. Monitor staff usage of web-based communication and notify the IT security department of violations.
D. Block access from user devices to unauthorized pages that allow web-based communication.