The BEST way to encourage good security practices is to:

A. schedule periodic compliance audits.
B. discipline those who fail to comply with the security policy.
C. recognize appropriate security behavior by individuals.
D. publish the information security policy.