Which of the following is the BEST method to assess the adequacy of security awareness in an organization?

A. Confirming a security awareness program exists
B. Interviewing employees about security responsibility
C. Administering security survey questionnaires
D. Observing employee security behaviors