Which of the following is the PRIMARY responsibility of an information security manager in an organization that is implementing the use of company-owned mobile devices in its operations?

A. Require remote wipe capabilities for devices.
B. Enforce passwords and data encryption on the devices.
C. Conduct security awareness training.
D. Review and update existing security policies.