An organization determines that an end-user has clicked on a malicious link. Which of the following would MOST effectively prevent similar situations from recurring?

A. End-user training
B. Virus protection
C. End-user access control
D. Updated security policies