Information security awareness programs are MOST effective when they are:

A. customized for each target audience
B. conducted at employee orientation
C. reinforced by computer-based training
D. sponsored by senior management