Which of the following is the MOST effective method to help ensure information security incidents are reported?

A. Providing information security awareness training to employees
B. Integrating information security language in conditions of employment
C. Integrating information security language in corporate compliance rules
D. Implementing an incident management system