Which of the following management decisions presents the GREATEST risk associated with data leakage?

A. Security awareness training is not provided to staff.
B. There is no requirement for desktops to be encrypted.
C. Security policies have not been updated in the past year.
D. Staff are allowed to work remotely.