Information security awareness programs are MOST effective when they are:

A. customized for each target audience.
B. sponsored by senior management.
C. reinforced by computer-based training.
D. conducted at employee orientation