Which of the following is the BEST way to increase the visibility of information security within an organization’s culture?

A. Requiring cross-functional information security training
B. Implementing user awareness campaigns for the entire company
C. Publishing an acceptable use policy
D. Establishing security policies based on industry standards